CVE-2008-1248 The web interface on the central phone server for the Snom 320 SIP Phone allows remote attackers to make arbitrary phone calls via the "Call a number" field. NOTE: this might overlap CVE-2007-3440.
MediumCVSS 5.8
EPSS 0.60%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The web interface on the central phone server for the Snom 320 SIP Phone allows remote attackers to make arbitrary phone calls via the "Call a number" field. NOTE: this might overlap CVE-2007-3440.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| snom 320 sip phone | All versions | No fix listed |
References
- www.gnucitizen.org exploit
- 20080301 The Router Hacking Challenge is Over! mailing-list
- snomsip-interface-unauth-access(41171) vdb-entry