VulnerabilityModified
CVE-2006-0179
The Cisco IP Phone 7940 allows remote attackers to cause a denial of service (reboot) via a large amount of TCP SYN packets (syn flood) to arbitrary ports, as demonstrated to port 80.
MEDIUM 5.0EPSS 13.6%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 13.6%, higher than 96% of all known CVEs. Patch or mitigate before the next change window.
Description
The Cisco IP Phone 7940 allows remote attackers to cause a denial of service (reboot) via a large amount of TCP SYN packets (syn flood) to arbitrary ports, as demonstrated to port 80.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
- EPSS
- 13.58% probability · 96th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- cisco/ip phone 7940
- Source
- cve@mitre.org
References
- http://downloads.securityfocus.com/vulnerabilities/exploits/cisco_ip7940_dos.plExploit
- http://secunia.com/advisories/18479Patch, Vendor Advisory
- http://securitytracker.com/id?1015488Exploit, Patch
- http://www.cisco.com/warp/public/707/cisco-response-20060113-ip-phones.shtmlVendor Advisory
- http://www.osvdb.org/22469
- http://www.securityfocus.com/bid/16200Exploit
- http://www.vupen.com/english/advisories/2006/0202Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24117
- https://www.exploit-db.com/exploits/1411
- http://downloads.securityfocus.com/vulnerabilities/exploits/cisco_ip7940_dos.plExploit
- http://secunia.com/advisories/18479Patch, Vendor Advisory
- http://securitytracker.com/id?1015488Exploit, Patch
- http://www.cisco.com/warp/public/707/cisco-response-20060113-ip-phones.shtmlVendor Advisory
- http://www.osvdb.org/22469
- http://www.securityfocus.com/bid/16200Exploit
- http://www.vupen.com/english/advisories/2006/0202Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24117
- https://www.exploit-db.com/exploits/1411
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.