CVSS Meta Temp Score | Current Exploit Price (≈) | CTI Interest Score |
---|---|---|
9.8 | $0-$5k | 0.00 |
A vulnerability, which was classified as critical, was found in Vonage Motorola Phone Adapter (unknown version). Affected is an unknown code block. The manipulation with an unknown input leads to a improper authentication vulnerability. CWE is classifying the issue as CWE-287. When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct. This is going to have an impact on confidentiality, integrity, and availability.
The weakness was published 10/24/2007 by ViPeR (Website). The advisory is available at sipera.com. This vulnerability is traded as CVE-2007-5791 since 11/01/2007. The exploitability is told to be easy. It is possible to launch the attack remotely. The exploitation doesn't require any form of authentication. The technical details are unknown and an exploit is not available.
There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
The vulnerability is also documented in the vulnerability database at X-Force (37416). Similar entries are available at 39533 and 39532.
Product
Vendor
Name
License
CPE 2.3
CPE 2.2
CVSSv4
VulDB CVSS-B Score: 🔍VulDB CVSS-BT Score: 🔍
VulDB Vector: 🔍
VulDB Reliability: 🔍
CVSSv3
VulDB Meta Base Score: 9.8VulDB Meta Temp Score: 9.8
VulDB Base Score: 9.8
VulDB Temp Score: 9.8
VulDB Vector: 🔍
VulDB Reliability: 🔍
CVSSv2
AV | AC | Au | C | I | A |
---|---|---|---|---|---|
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
Vector | Complexity | Authentication | Confidentiality | Integrity | Availability |
---|---|---|---|---|---|
unlock | unlock | unlock | unlock | unlock | unlock |
unlock | unlock | unlock | unlock | unlock | unlock |
unlock | unlock | unlock | unlock | unlock | unlock |
VulDB Base Score: 🔍
VulDB Temp Score: 🔍
VulDB Reliability: 🔍
NVD Base Score: 🔍
Exploiting
Class: Improper authenticationCWE: CWE-287
CAPEC: 🔍
ATT&CK: 🔍
Local: No
Remote: Yes
Availability: 🔍
Status: Not defined
EPSS Score: 🔍
EPSS Percentile: 🔍
Price Prediction: 🔍
Current Price Estimation: 🔍
0-Day | unlock | unlock | unlock | unlock |
---|---|---|---|---|
Today | unlock | unlock | unlock | unlock |
Threat Intelligence
Interest: 🔍Active Actors: 🔍
Active APT Groups: 🔍
Countermeasures
Recommended: no mitigation knownStatus: 🔍
0-Day Time: 🔍
Timeline
10/24/2007 🔍10/24/2007 🔍
10/26/2007 🔍
10/26/2007 🔍
11/01/2007 🔍
11/01/2007 🔍
05/09/2016 🔍
08/17/2022 🔍
Sources
Advisory: sipera.comResearcher: ViPeR
Status: Not defined
CVE: CVE-2007-5791 (🔍)
X-Force: 37416
SecurityFocus: 26129 - Vonage VoIP Multiple Security Vulnerabilities
Secunia: 27380 - Vonage Motorola VT2142 Spoofing Vulnerability, Less Critical
OSVDB: 38525 - Vonage Motorola Phone Adapter VT 2142-VD SIP INVITE Message Saturation DoS
See also: 🔍
Entry
Created: 05/09/2016 14:54Updated: 08/17/2022 09:10
Changes: 05/09/2016 14:54 (52), 12/23/2018 13:20 (5), 08/17/2022 09:10 (3)
Complete: 🔍
Cache ID: 3:43E
No comments yet. Languages: en.
Please log in to comment.