CVE-2007-4459

no score yetEPSS 14%

cisco: no CVSS score yet. EPSS 14% chance of exploitation in the next 30 days.

Cisco IP Phone 7940 and 7960 with P0S3-08-6-00 firmware, and other SIP firmware before 8.7(0), allows remote attackers to cause a denial of service (device reboot) via (1) a certain sequence of 10 invalid SIP INVITE and OPTIONS messages; or (2) a certain invalid SIP INVITE message that contains a remote tag, followed by a certain set of two related SIP OPTIONS messages.

EPSS: 14% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2007-08-21
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

cisco:voip_phone_cp-7940
cisco:voip_phone_cp-7960

References

http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065401.html
http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065402.html
http://secunia.com/advisories/26547
http://securityreason.com/securityalert/3042
http://securitytracker.com/id?1018591

Check your stack JSON