Cisco Voip Phone CP-7940 vulnerabilities

4 CVEs affecting Cisco Voip Phone CP-7940, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2007-4459, published 2007-08-21.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2007-4459, published 2007-08-21. High severity, CVSS 7.1. EPSS: 14% chance of exploitation in the next 30 days. Cisco IP Phone 7940 and 7960 with P0S3-08-6-00 firmware, and other SIP firmware before 8.7(0), allows remote attackers to cause a denial of service (device reboot) via (1) a certain sequence of 10…
CVE-2002-0882, published 2002-10-04. Medium severity, CVSS 6.4. EPSS: 2.7% chance of exploitation in the next 30 days. The web server for Cisco IP Phone (VoIP) models 7910, 7940, and 7960 allows remote attackers to cause a denial of service (reset) and possibly read sensitive memory via a large integer value in (1)…
CVE-2002-0880, published 2002-10-04. Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days. Cisco IP Phone (VoIP) models 7910, 7940, and 7960 allow remote attackers to cause a denial of service (crash) via malformed packets as demonstrated by (1) "jolt", (2) "jolt2", (3) "raped", (4)…
CVE-2002-0881, published 2002-10-04. Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days. Cisco IP Phone (VoIP) models 7910, 7940, and 7960 use a default administrative password, which allows attackers with physical access to the phone to modify the configuration settings.