CVE-2007-5791 The Vonage Motorola Phone Adapter VT 2142-VD does not properly verify that a SIP INVITE message originated from a legitimate server, which allows remote attackers to send spoofed INVITE messages, as d...
HighCVSS 10.0
EPSS 3.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Vonage Motorola Phone Adapter VT 2142-VD does not properly verify that a SIP INVITE message originated from a legitimate server, which allows remote attackers to send spoofed INVITE messages, as demonstrated by a flood of messages triggering a denial of service, and by phone calls with malicious content.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| vonage motorola phone adapter vt2142-vd | All versions | No fix listed |
References
- 38524 vdb-entry
- 38525 vdb-entry
- 27380 third-party-advisory vendor-advisory
- 26129 vdb-entry
- www.sipera.com
- www.sipera.com
- vonage-motorola-invite-dos(37416) vdb-entry
- vonage-motorola-invite-weak-security(37420) vdb-entry