CVE-2006-5233
Polycom SoundPoint IP 301 VoIP Desktop Phone, firmware version 1.4.1.0040, allows remote attackers to cause a denial of service (reboot) via (1) a long URL sent to the HTTP daemon and (2) unspecified manipulations as demonstrated by the Nessus…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (1.83%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Polycom SoundPoint IP 301 VoIP Desktop Phone, firmware version 1.4.1.0040, allows remote attackers to cause a denial of service (reboot) via (1) a long URL sent to the HTTP daemon and (2) unspecified manipulations as demonstrated by the Nessus http_fingerprinting_hmap.nasl script.
- CVSS 2.0
- 7.8 HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C
- EPSS
- 1.83% probability · 78th percentile
- CISA KEV
- Not listed
- Affected
- polycom/soundpoint ip 301
- Source
- cve@mitre.org
References
- http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0090.html
- http://secunia.com/advisories/22266Vendor Advisory
- http://www.securityfocus.com/bid/20351
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29350
- http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0090.html
- http://secunia.com/advisories/22266Vendor Advisory
- http://www.securityfocus.com/bid/20351
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29350
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.