Cisco IP Phone 7940 vulnerabilities

3 CVEs affecting Cisco IP Phone 7940, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2007-5583, published 2007-12-18.

More from Cisco.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2006-0179, published 2006-01-11. Medium severity, CVSS 5.0. EPSS: 13.6% chance of exploitation in the next 30 days. The Cisco IP Phone 7940 allows remote attackers to cause a denial of service (reboot) via a large amount of TCP SYN packets (syn flood) to arbitrary ports, as demonstrated to port 80.
• CVE-2003-1109, published 2003-12-31. High severity, CVSS 7.5. EPSS: 6.8% chance of exploitation in the next 30 days. The Session Initiation Protocol (SIP) implementation in multiple Cisco products including IP Phone models 7940 and 7960, IOS versions in the 12.2 train, and Secure PIX 5.2.9 to 6.2.2 allows remote…
• CVE-2007-5583, published 2007-12-18. High severity, CVSS 7.8. EPSS: 6% chance of exploitation in the next 30 days. Cisco IP Phone 7940 with firmware P0S3-08-7-00 allows remote attackers to cause a denial of service ("486 Busy" responses or device reboot) via a sequence of SIP INVITE transactions in which the…