CVE-2007-4366: Wengo Wengophone

Medium severity, CVSS 5.0. EPSS: 3.4% chance of exploitation in the next 30 days.

WengoPhone 2.1 allows remote attackers to cause a denial of service (device crash) via a SIP INVITE message without a Content-Type header.

Affected products

• Wengo Wengophone: version 2.1 only

Published 2007-08-15. Last modified 2026-06-16.