Avaya 4602sw IP Phone vulnerabilities

4 CVEs affecting Avaya 4602sw IP Phone, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2007-3322, published 2007-06-21.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2007-3319, published 2007-06-21. High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days. The Avaya 4602SW IP Phone (Model 4602D02A) with 2.2.2 and earlier SIP firmware does not use the cnonce parameter in the Authorization header of SIP requests during MD5 digest authentication, which…
CVE-2007-3321, published 2007-06-21. Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days. The Avaya 4602 SW IP Phone (Model 4602D02A) with 2.2.2 and earlier SIP firmware allows remote attackers to cause a denial of service (device reboot) via a flood of packets to the BOOTP port (68/udp).
CVE-2007-3322, published 2007-06-21. Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days. The Avaya 4602 SW IP Phone (Model 4602D02A) with 2.2.2 and earlier SIP firmware uses a constant media port number for calls, which allows remote attackers to cause a denial of service (audio quality…
CVE-2007-3320, published 2007-06-21. Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days. The Avaya 4602SW IP Phone (Model 4602D02A) with 2.2.2 and earlier SIP firmware accepts SIP INVITE requests from arbitrary source IP addresses, which allows remote attackers to have an unspecified…