D-Link: >> Dph-541 >> 1.00.14 Security Vulnerabilities
The D-Link DPH-540/DPH-541 phone accepts SIP INVITE messages that are not from the Call Server's IP address, which allows remote attackers to engage in arbitrary SIP communication with the phone, as demonstrated by communication with forged caller ID.
CVSS Score
7.8
EPSS Score
0.002
Published
2007-06-22
The D-Link DPH-540/DPH-541 phone allows remote attackers to cause a denial of service (device outage) via a malformed SDP header in a SIP INVITE message.
CVSS Score
7.8
EPSS Score
0.009
Published
2007-06-22