Lucene search
HistoryAug 15, 2007 - 7:17 p.m.
CVE-2007-4366
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
6.6
Confidence
High
EPSS
0.05
Percentile
92.9%
WengoPhone 2.1 allows remote attackers to cause a denial of service (device crash) via a SIP INVITE message without a Content-Type header.
Affected configurations
Node
wengowengophoneMatch2.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| wengo | wengophone | 2.1 | cpe:2.3:a:wengo:wengophone:2.1:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2007-4366
2007-08-15 19:17:00
exploitdb
exploitdb
WengoPhone 2.x - SIP Phone Remote Denial of Service
2007-08-13 00:00:00
prion
prion
Type confusion
2007-08-15 19:17:00
cvelist
cvelist
CVE-2007-4366
2007-08-15 19:00:00
ubuntucve
ubuntucve
CVE-2007-4366
2007-08-15 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
6.6
Confidence
High
EPSS
0.05
Percentile
92.9%
Related for NVD:CVE-2007-4366