CVE-2007-3319

The Avaya 4602SW IP Phone (Model 4602D02A) with 2.2.2 and earlier SIP firmware does not use the cnonce parameter in the Authorization header of SIP requests…

published June 21, 2007

CVSS
—
EPSS
2%
Percentile
76.1
In the wild
Unconfirmed
What it is

The Avaya 4602SW IP Phone (Model 4602D02A) with 2.2.2 and earlier SIP firmware does not use the cnonce parameter in the Authorization header of SIP requests during MD5 digest authentication, which allows remote attackers to conduct man-in-the-middle attacks and hijack or intercept communications.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01632 · 76.1th percentile
Published
2007-06-21T18:00Z
EPSS history
Timeline
  • 21 JUN 18:00Z
    The Avaya 4602SW IP Phone (Model 4602D02A) with 2.2.2 and earlier SIP firmware does not use the cnonce parameter in the Authorization header of SIP requests…
    cvelistv5