D-Link Dph-540 vulnerabilities

2 CVEs affecting D-Link Dph-540, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2007-3348, published 2007-06-22.

More from D-Link.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2007-3348, published 2007-06-22. High severity, CVSS 7.8. EPSS: 1.7% chance of exploitation in the next 30 days. The D-Link DPH-540/DPH-541 phone allows remote attackers to cause a denial of service (device outage) via a malformed SDP header in a SIP INVITE message.
• CVE-2007-3347, published 2007-06-22. High severity, CVSS 7.8. EPSS: 1.3% chance of exploitation in the next 30 days. The D-Link DPH-540/DPH-541 phone accepts SIP INVITE messages that are not from the Call Server's IP address, which allows remote attackers to engage in arbitrary SIP communication with the phone, as…