Avaya 4602Sw Ip Phone vulnerabilities
4 vulnerabilities
Known vulnerabilities in Avaya 4602Sw Ip Phone, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2007-3322avaya4602sw_ip_phone
EPSS score1.44%
The Avaya 4602 SW IP Phone (Model 4602D02A) with 2.2.2 and earlier SIP firmware uses a constant media port number for calls, which allows remote attackers to cause a denial of service (audio quality loss) via a flood of packets to the RTP port.CVE-2007-3321avaya4602sw_ip_phoneEPSS score1.44%
The Avaya 4602 SW IP Phone (Model 4602D02A) with 2.2.2 and earlier SIP firmware allows remote attackers to cause a denial of service (device reboot) via a flood of packets to the BOOTP port (68/udp).CVE-2007-3319avaya4602sw_ip_phoneEPSS score1.63%
The Avaya 4602SW IP Phone (Model 4602D02A) with 2.2.2 and earlier SIP firmware does not use the cnonce parameter in the Authorization header of SIP requests during MD5 digest authentication, which allows remote attackers to conduct man-in-the-middle attacks and hijack or intercept communications.CVE-2007-3320avaya4602sw_ip_phoneEPSS score1.40%
The Avaya 4602SW IP Phone (Model 4602D02A) with 2.2.2 and earlier SIP firmware accepts SIP INVITE requests from arbitrary source IP addresses, which allows remote attackers to have an unspecified impact.