Description
The Avaya 4602SW IP Phone (Model 4602D02A) with 2.2.2 and earlier SIP firmware accepts SIP INVITE requests from arbitrary source IP addresses, which allows remote attackers to have an unspecified impact.
References
- avaya-sipinvite-security-bypass(34971) vdb-entry
- http://support.avaya.com/elmodocs2/security/ASA-2007-263.htm
- http://www.sipera.com/index.php?action=resources%2Cthreat_advisory&tid=300&
- 24544 vdb-entry
- 25747 third-party-advisory
- 38116 vdb-entry