CVE-2007-5583
Quick assessment
Affected
n/a n/a
Exploitation
High exploitation probability; assess promptly
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Cisco 7940型IP电话是一种多功能通讯设备，通过IP网络传递语音信号。 Cisco 7940在处理畸形INVITE消息时存在漏洞，远程攻击者可能利用此漏洞导致设备不可用。 如果向Cisco 7940 IP电话发送了一系列SIP INVITE消息的话，就可能导致设备看起来在正常工作而实际上无法接收或发起呼叫，继续发送INVITE消息的话就会导致设备重启。 攻击者所发送的SIP INVITE消息中的Request-URI部分应不包含有用户名，如INVITE sip:XXX.XXX.XXX.XXX SI
Public Exploits 1
ExploitDB · 1
EDB-4692 [dos]
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2007-5583
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Cisco IP Phone 7940 with firmware P0S3-08-7-00 allows remote attackers to cause a denial of service ("486 Busy" responses or device reboot) via a sequence of SIP INVITE transactions in which the Request-URI lacks a user name, a different vulnerability than CVE-2007-4459.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Cisco 7940 SIP INVITE消息远程拒绝服务漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco 7940型IP电话是一种多功能通讯设备，通过IP网络传递语音信号。 Cisco 7940在处理畸形INVITE消息时存在漏洞，远程攻击者可能利用此漏洞导致设备不可用。 如果向Cisco 7940 IP电话发送了一系列SIP INVITE消息的话，就可能导致设备看起来在正常工作而实际上无法接收或发起呼叫，继续发送INVITE消息的话就会导致设备重启。 攻击者所发送的SIP INVITE消息中的Request-URI部分应不包含有用户名，如INVITE sip:XXX.XXX.XXX.XXX SI
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2007-5583
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2007-5583
请登录查看更多情报信息。
Vendor Advisories for CVE-2007-5583 (3)
Exploits & Public PoCs for CVE-2007-5583 (1)
Mailing List Discussions for CVE-2007-5583 (3)
-
http://lists.grok.org.uk/pipermail/full-disclosure/2007-December/058837.html mailing-list x_refsource_FULLDISC
-
http://lists.grok.org.uk/pipermail/full-disclosure/2007-December/058932.html mailing-list x_refsource_FULLDISC
-
Same Patch Batch · n/a · 2007-12-18 · 13 CVEs total
| CVE-2007-5862 | Apple Mac OS X Keychain 安全绕过漏洞 | |
| CVE-2007-6354 | exiftags 未明漏洞 | |
| CVE-2007-6355 | exiftags 未明漏洞 | |
| CVE-2007-6356 | exiftags Multiple 未明缓冲区溢出和拒绝服务攻击漏洞 | |
| CVE-2007-6433 | JBoss Seam order 远程SQL注入漏洞 | |
| CVE-2007-6434 | Linux Kernel Mmap_min_addr 本地安全绕过漏洞 | |
| CVE-2007-6435 | Novell GroupWise img 标签远程栈溢出漏洞 | |
| CVE-2007-6436 | Justsystem Ichitaro JSGCI.DLL 缓冲区溢出漏洞 | |
| CVE-2007-6424 | Netfortris Fonality Trixbox 权限许可和访问控制问题漏洞 | |
| CVE-2007-6283 | Red Hat Enterprise Linux 和 Fedora 信息泄露漏洞 | |
| CVE-2007-6417 | Linux Kernel mm/shmem.c 共享内存安全漏洞 | |
| CVE-2007-6418 | DSPAM Debian 'libdspam7-drv-mysql' Cron Job MySQL Calls Local 信息泄露漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2007-5583
No comments yet