CVE-2007-3347 | BDVDB-2026-24843 Detail

Description#

The D-Link DPH-540/DPH-541 phone accepts SIP INVITE messages that are not from the Call Server's IP address, which allows remote attackers to engage in arbitrary SIP communication with the phone, as demonstrated by communication with forged caller ID.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.sipera.com/index.php?action=resources%2Cthreat_advisory&tid=219&
http://www.vupen.com/english/advisories/2007/2320
http://secunia.com/advisories/25803
http://www.securityfocus.com/bid/24560
https://exchange.xforce.ibmcloud.com/vulnerabilities/35063

Exploit#

No public exploit known

History#

Version 12007-06-22Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.