Description
Unspecified vulnerability in the Cisco IP Phone 7940 and 7960 running firmware before POS8-6-0 allows remote attackers to cause a denial of service via the Remote-Party-ID sipURI field in a SIP INVITE request. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 1
- Cisco Phone 7940/7960 - 'SIP INVITE' Remote Denial of Service EDB-3526 · dos · Mar 20, 2007 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- 1017797 vdb-entry
- 20070320 Cisco IP Phone 7940/7960 SIP INVITE Denial of Service vendor-advisory
- cisco-ipphone-sip-invite-dos(33098) vdb-entry
- ADV-2007-1023 vdb-entry
- 24600 third-party-advisory
- 23047 vdb-entry