The D-Link DPH-540/DPH-541 phone allows remote attackers to cause a denial of service (device outage) via a malformed SDP header in a SIP INVITE message.
Max CVSS
7.8
EPSS Score
2.65%
Published
2007-06-22
Updated
2017-07-29
The D-Link DPH-540/DPH-541 phone accepts SIP INVITE messages that are not from the Call Server's IP address, which allows remote attackers to engage in arbitrary SIP communication with the phone, as demonstrated by communication with forged caller ID.
Max CVSS
7.8
EPSS Score
0.92%
Published
2007-06-22
Updated
2017-07-29
2 vulnerabilities found