Description
Siemens C450 IP and C475 IP VoIP devices allow remote attackers to cause a denial of service (disconnected calls and device reboot) via a crafted SIP packet to UDP port 5060.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 1
- Siemens C450IP/C475IP - Remote Denial of Service EDB-7220 · dos · Nov 24, 2008 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- gigaset-sip-dos(46820) vdb-entry
- 7220 exploit
- 50274 vdb-entry
- 32827 third-party-advisory
- 32451 vdb-entry
- 20081124 Siemens C450IP/C475IP DoS mailing-list