Description
The Grandstream SIP Phone GXV-3000 with firmware 1.0.1.7, Loader 1.0.0.6, and Boot 1.0.0.18 allows remote attackers to force silent call completion, eavesdrop on the phone's local environment, and cause a denial of service (blocked call reception) via a certain SIP INVITE message followed by a certain "SIP/2.0 183 Session Progress" message.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 1
- Grandstream GXV-3000 Phone - Remote Denial of Service EDB-30517 · dos · Aug 22, 2007 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- 26568 third-party-advisory
- ADV-2007-2970 vdb-entry
- 25399 vdb-entry
- 1018598 vdb-entry
- 20070822 Remote eavesdropping with SIP Phone GXV-3000 mailing-list
- 3059 third-party-advisory
- sipphone-sip-dos(36170) vdb-entry
- 40185 vdb-entry