CVE-2007-4553 The Thomson ST 2030 SIP phone with software 1.52.1 allows remote attackers to cause a denial of service (device hang) via an INVITE message with a Via header that contains a '/' (slash) instead of the...
MediumCVSS 5.0
EPSS 8.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Thomson ST 2030 SIP phone with software 1.52.1 allows remote attackers to cause a denial of service (device hang) via an INVITE message with a Via header that contains a '/' (slash) instead of the required space following the SIP version number.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| thomson st 2030 sip phone | = 1-1.52.1_firmware | No fix listed |
References
- 20070823 DOS vulnerability on Thomson SIP phone ST 2030 using the VIA Header mailing-list
- 26587 third-party-advisory
- 3075 third-party-advisory
- 25446 vdb-entry
- 1018603 vdb-entry
- ADV-2007-2988 vdb-entry
- thomson-sip-dos(36217) vdb-entry