CVE-2007-3348

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-06-22 · updated 2026-06-16

Description

The D-Link DPH-540/DPH-541 phone allows remote attackers to cause a denial of service (device outage) via a malformed SDP header in a SIP INVITE message.

Affected products

D-Link Dph-540: 1.00.03, 1.00.14
D-Link Dph-541: 1.00.03, 1.00.14

References

http://osvdb.org/36158
http://secunia.com/advisories/25803
http://www.securityfocus.com/bid/24538
http://www.sipera.com/index.php?action=resources%2Cthreat_advisory&tid=218&
http://www.vupen.com/english/advisories/2007/2320
https://exchange.xforce.ibmcloud.com/vulnerabilities/35062
http://osvdb.org/36158
http://secunia.com/advisories/25803
http://www.securityfocus.com/bid/24538
http://www.sipera.com/index.php?action=resources%2Cthreat_advisory&tid=218&
http://www.vupen.com/english/advisories/2007/2320
https://exchange.xforce.ibmcloud.com/vulnerabilities/35062

Get alerted when CVE-2007-3348 or the next vulnerability affects your stack