CVE-2007-3320

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-06-21 · updated 2026-06-16

Description

The Avaya 4602SW IP Phone (Model 4602D02A) with 2.2.2 and earlier SIP firmware accepts SIP INVITE requests from arbitrary source IP addresses, which allows remote attackers to have an unspecified impact.

Affected products

Avaya 4602Sw Ip Phone: through r2.2

References

http://osvdb.org/38116
http://secunia.com/advisories/25747
http://support.avaya.com/elmodocs2/security/ASA-2007-263.htm
http://www.securityfocus.com/bid/24544
http://www.sipera.com/index.php?action=resources%2Cthreat_advisory&tid=300&
https://exchange.xforce.ibmcloud.com/vulnerabilities/34971
http://osvdb.org/38116
http://secunia.com/advisories/25747
http://support.avaya.com/elmodocs2/security/ASA-2007-263.htm
http://www.securityfocus.com/bid/24544
http://www.sipera.com/index.php?action=resources%2Cthreat_advisory&tid=300&
https://exchange.xforce.ibmcloud.com/vulnerabilities/34971

Get alerted when CVE-2007-3320 or the next vulnerability affects your stack