CVE-2007-3349: Aastra Telecom 9112i SIP Phone

High severity, CVSS 7.8. EPSS: 1.9% chance of exploitation in the next 30 days.

The Aastra 9112i SIP Phone with firmware 1.4.0.1048 and boot version 1.1.0.10 allows remote attackers to (1) cause a denial of service (device freeze) via a malformed SIP message of a certain length or (2) cause a denial of service (continuous ring) via a malformed SIP message of a certain other length.

Affected products

• Aastra Telecom 9112i SIP Phone: version 1.4.0.1048 only

Published 2007-06-22. Last modified 2026-06-16.