Description
The Vonage Motorola Phone Adapter VT 2142-VD does not properly verify that a SIP INVITE message originated from a legitimate server, which allows remote attackers to send spoofed INVITE messages, as demonstrated by a flood of messages triggering a denial of service, and by phone calls with malicious content.
References
- 38525 vdb-entry
- http://www.sipera.com/index.php?action=resources%2Cthreat_advisory&tid=357
- 38524 vdb-entry
- vonage-motorola-invite-weak-security(37420) vdb-entry
- 27380 third-party-advisory
- http://www.sipera.com/index.php?action=resources%2Cthreat_advisory&tid=360
- vonage-motorola-invite-dos(37416) vdb-entry
- 26129 vdb-entry