Lucene search
HistoryJun 22, 2007 - 6:30 p.m.
CVE-2007-3368
polycom
sip
phone
http
server
buffer overflow
denial of service
cve-2007-3368
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
6.8 Medium
AI Score
Confidence
High
0.013 Low
EPSS
Percentile
85.8%
Buffer overflow in the HTTP server on the Polycom SoundPoint IP 601 SIP phone with BootROM 3.0.x+ allows remote attackers to cause a denial of service (device reboot) via a malformed CGI parameter.
Affected configurations
Node
polycomsoundpoint_ip_650Matchbootrom_3.0.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| polycom:soundpoint_ip_650 | polycom soundpoint ip 650 | eq | bootrom_3.0.0 |
Related
cvelist
cvelist
CVE-2007-3368
2007-06-22 18:00:00
nvd
nvd
CVE-2007-3368
2007-06-22 18:30:00
prion
prion
Buffer overflow
2007-06-22 18:30:00
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
6.8 Medium
AI Score
Confidence
High
0.013 Low
EPSS
Percentile
85.8%
Related for CVE-2007-3368