VAR-200706-0410

Vulnerability from variot - Updated: 2025-04-10 23:19

The Aastra 9112i SIP Phone with firmware 1.4.0.1048 and boot version 1.1.0.10 allows remote attackers to (1) cause a denial of service (device freeze) via a malformed SIP message of a certain length or (2) cause a denial of service (continuous ring) via a malformed SIP message of a certain other length. Aastra 9112i IP phone is prone to a denial-of-service vulnerability because the device fails to handle specially crafted SIP messages. An attacker can exploit this issue to crash the affected device, denying service to legitimate users. This issue affects firmware 1.4.0.1048, boot version: 1.1.0.10

Show details on source website
To clipboard 

{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-200706-0410",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "9112i sip phone",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "aastra telecom",
        "version": "1.4.0.1048"
      },
      {
        "model": "9112i sip phone",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "aastra telecom",
        "version": "1.4.0.1048 and  boot version 1.1.0.10"
      },
      {
        "model": "9112i sip phone",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "aastra",
        "version": "1.4.0.1048"
      },
      {
        "model": "9112i sip phone",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "aastra",
        "version": "0"
      }
    ],
    "sources": [
      {
        "db": "BID",
        "id": "24537"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2007-002227"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200706-390"
      },
      {
        "db": "NVD",
        "id": "CVE-2007-3349"
      }
    ]
  },
  "configurations": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/configurations#",
      "children": {
        "@container": "@list"
      },
      "cpe_match": {
        "@container": "@list"
      },
      "data": {
        "@container": "@list"
      },
      "nodes": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "cpe_match": [
              {
                "cpe22Uri": "cpe:/h:aastra_telecom:9112i_sip_phone",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2007-002227"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Sipera VIPER Lab is credited with the discovery of this vulnerability.",
    "sources": [
      {
        "db": "BID",
        "id": "24537"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200706-390"
      }
    ],
    "trust": 0.9
  },
  "cve": "CVE-2007-3349",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "COMPLETE",
            "baseScore": 7.8,
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 10.0,
            "id": "CVE-2007-3349",
            "impactScore": 6.9,
            "integrityImpact": "NONE",
            "severity": "HIGH",
            "trust": 1.8,
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "version": "2.0"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "VULHUB",
            "availabilityImpact": "COMPLETE",
            "baseScore": 7.8,
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 10.0,
            "id": "VHN-26711",
            "impactScore": 6.9,
            "integrityImpact": "NONE",
            "severity": "HIGH",
            "trust": 0.1,
            "vectorString": "AV:N/AC:L/AU:N/C:N/I:N/A:C",
            "version": "2.0"
          }
        ],
        "cvssV3": [],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2007-3349",
            "trust": 1.0,
            "value": "HIGH"
          },
          {
            "author": "NVD",
            "id": "CVE-2007-3349",
            "trust": 0.8,
            "value": "High"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-200706-390",
            "trust": 0.6,
            "value": "HIGH"
          },
          {
            "author": "VULHUB",
            "id": "VHN-26711",
            "trust": 0.1,
            "value": "HIGH"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-26711"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2007-002227"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200706-390"
      },
      {
        "db": "NVD",
        "id": "CVE-2007-3349"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "The Aastra 9112i SIP Phone with firmware 1.4.0.1048 and boot version 1.1.0.10 allows remote attackers to (1) cause a denial of service (device freeze) via a malformed SIP message of a certain length or (2) cause a denial of service (continuous ring) via a malformed SIP message of a certain other length. Aastra 9112i IP phone is prone to a denial-of-service vulnerability because the device fails to handle specially crafted SIP messages. \nAn attacker can exploit this issue to crash the affected device, denying service to legitimate users. \nThis issue affects firmware 1.4.0.1048, boot version: 1.1.0.10",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2007-3349"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2007-002227"
      },
      {
        "db": "BID",
        "id": "24537"
      },
      {
        "db": "VULHUB",
        "id": "VHN-26711"
      }
    ],
    "trust": 1.98
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2007-3349",
        "trust": 2.8
      },
      {
        "db": "BID",
        "id": "24537",
        "trust": 2.0
      },
      {
        "db": "VUPEN",
        "id": "ADV-2007-2318",
        "trust": 1.7
      },
      {
        "db": "OSVDB",
        "id": "37496",
        "trust": 1.7
      },
      {
        "db": "SECUNIA",
        "id": "25806",
        "trust": 1.7
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2007-002227",
        "trust": 0.8
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200706-390",
        "trust": 0.7
      },
      {
        "db": "XF",
        "id": "35060",
        "trust": 0.6
      },
      {
        "db": "VULHUB",
        "id": "VHN-26711",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-26711"
      },
      {
        "db": "BID",
        "id": "24537"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2007-002227"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200706-390"
      },
      {
        "db": "NVD",
        "id": "CVE-2007-3349"
      }
    ]
  },
  "id": "VAR-200706-0410",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-26711"
      }
    ],
    "trust": 0.01
  },
  "last_update_date": "2025-04-10T23:19:07.804000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "Top Page",
        "trust": 0.8,
        "url": "http://www.aastratelecom.com/"
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2007-002227"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "NVD-CWE-Other",
        "trust": 1.0
      }
    ],
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2007-3349"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 1.7,
        "url": "http://www.securityfocus.com/bid/24537"
      },
      {
        "trust": 1.7,
        "url": "http://osvdb.org/37496"
      },
      {
        "trust": 1.7,
        "url": "http://secunia.com/advisories/25806"
      },
      {
        "trust": 1.1,
        "url": "http://www.vupen.com/english/advisories/2007/2318"
      },
      {
        "trust": 1.1,
        "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35060"
      },
      {
        "trust": 1.0,
        "url": "http://www.sipera.com/index.php?action=resources%2cthreat_advisory\u0026tid=277\u0026"
      },
      {
        "trust": 0.9,
        "url": "http://www.sipera.com/index.php?action=resources,threat_advisory\u0026tid=277\u0026"
      },
      {
        "trust": 0.8,
        "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2007-3349"
      },
      {
        "trust": 0.8,
        "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2007-3349"
      },
      {
        "trust": 0.6,
        "url": "http://xforce.iss.net/xforce/xfdb/35060"
      },
      {
        "trust": 0.6,
        "url": "http://www.frsirt.com/english/advisories/2007/2318"
      },
      {
        "trust": 0.3,
        "url": "http://www.aastratelecom.com/cps/rde/xchg/sid-3d8ccb73-77b439fd/03/hs.xsl/18236.htm"
      },
      {
        "trust": 0.1,
        "url": "http://www.sipera.com/index.php?action=resources,threat_advisory\u0026amp;tid=277\u0026amp;"
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-26711"
      },
      {
        "db": "BID",
        "id": "24537"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2007-002227"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200706-390"
      },
      {
        "db": "NVD",
        "id": "CVE-2007-3349"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "VULHUB",
        "id": "VHN-26711"
      },
      {
        "db": "BID",
        "id": "24537"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2007-002227"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200706-390"
      },
      {
        "db": "NVD",
        "id": "CVE-2007-3349"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2007-06-22T00:00:00",
        "db": "VULHUB",
        "id": "VHN-26711"
      },
      {
        "date": "2007-06-19T00:00:00",
        "db": "BID",
        "id": "24537"
      },
      {
        "date": "2012-06-26T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2007-002227"
      },
      {
        "date": "2007-06-22T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-200706-390"
      },
      {
        "date": "2007-06-22T18:30:00",
        "db": "NVD",
        "id": "CVE-2007-3349"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2017-07-29T00:00:00",
        "db": "VULHUB",
        "id": "VHN-26711"
      },
      {
        "date": "2007-06-26T23:38:00",
        "db": "BID",
        "id": "24537"
      },
      {
        "date": "2012-06-26T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2007-002227"
      },
      {
        "date": "2007-06-25T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-200706-390"
      },
      {
        "date": "2025-04-09T00:30:58.490000",
        "db": "NVD",
        "id": "CVE-2007-3349"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-200706-390"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Aastra 9112i SIP Phone SIP Message Denial Of Service Vulnerability",
    "sources": [
      {
        "db": "BID",
        "id": "24537"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200706-390"
      }
    ],
    "trust": 0.9
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "other",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-200706-390"
      }
    ],
    "trust": 0.6
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.