Cisco Session Initiation Protocol (sip) Firmware vulnerabilities
6 CVEs affecting Cisco Session Initiation Protocol (sip) Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2008-0531, published 2008-02-15.
More from Cisco.
Highest priority
Known exploited (CISA KEV) first, then by EPSS exploit probability.
- CVE-2008-0528, published 2008-02-15. High severity, CVSS 10.0. EPSS: 5.4% chance of exploitation in the next 30 days. Buffer overflow in Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SIP firmware might allow remote attackers to execute arbitrary code via a SIP message with crafted MIME data.
- CVE-2008-0529, published 2008-02-15. High severity, CVSS 10.0. EPSS: 5.4% chance of exploitation in the next 30 days. Buffer overflow in the telnet server in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G running SCCP firmware might allow remote authenticated users to execute arbitrary code via…
- CVE-2008-0530, published 2008-02-15. High severity, CVSS 10.0. EPSS: 5.4% chance of exploitation in the next 30 days. Buffer overflow in Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SCCP and SIP firmware might allow remote attackers to execute arbitrary code via a crafted DNS response.
- CVE-2008-0531, published 2008-02-15. High severity, CVSS 9.3. EPSS: 2.9% chance of exploitation in the next 30 days. Heap-based buffer overflow in Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SIP firmware might allow remote SIP servers to execute arbitrary code via a crafted challenge/response…
- CVE-2008-0526, published 2008-02-15. High severity, CVSS 7.8. EPSS: 1.9% chance of exploitation in the next 30 days. Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SCCP firmware allows remote attackers to cause a denial of service (reboot) via a long ICMP echo request (ping) packet.
- CVE-2008-0527, published 2008-02-15. High severity, CVSS 7.8. EPSS: 1.9% chance of exploitation in the next 30 days. The HTTP server in Cisco Unified IP Phone 7935 and 7936 running SCCP firmware allows remote attackers to cause a denial of service (reboot) via a crafted HTTP request.