Cisco Voip Phone Cp 7940 vulnerabilities
4 vulnerabilities
Known vulnerabilities in Cisco Voip Phone Cp 7940, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2007-4459ciscovoip_phone_cp-7940+1
EPSS score13.99%
Cisco IP Phone 7940 and 7960 with P0S3-08-6-00 firmware, and other SIP firmware before 8.7(0), allows remote attackers to cause a denial of service (device reboot) via (1) a certain sequence of 10 invalid SIP INVITE and OPTIONS messages; or (2) a certain invalid SIP INVITE message that contains a remote tag, followed by a certain set of two related SIP OPTIONS messages.CVE-2002-0880ciscoskinny_client_control_protocol_software+1EPSS score1.31%
Cisco IP Phone (VoIP) models 7910, 7940, and 7960 allow remote attackers to cause a denial of service (crash) via malformed packets as demonstrated by (1) "jolt", (2) "jolt2", (3) "raped", (4) "hping2", (5) "bloop", (6) "bubonic", (7) "mutant", (8) "trash", and (9) "trash2."CVE-2002-0882ciscoskinny_client_control_protocol_software+1EPSS score2.75%
The web server for Cisco IP Phone (VoIP) models 7910, 7940, and 7960 allows remote attackers to cause a denial of service (reset) and possibly read sensitive memory via a large integer value in (1) the stream ID of the StreamingStatistics script, or (2) the port ID of the PortInformation script.CVE-2002-0881ciscoskinny_client_control_protocol_software+1EPSS score0.39%
Cisco IP Phone (VoIP) models 7910, 7940, and 7960 use a default administrative password, which allows attackers with physical access to the phone to modify the configuration settings.