CVE-2006-0179

Cisco IP Phone 7940 - Memory Corruption

Title source: rule

Description

The Cisco IP Phone 7940 allows remote attackers to cause a denial of service (reboot) via a large amount of TCP SYN packets (syn flood) to arbitrary ports, as demonstrated to port 80.

Exploits (1)

exploitdb WORKING POC VERIFIED

by kokanin · perldoshardware

https://www.exploit-db.com/exploits/1411

View Code ZIP pw:eip

References (9)

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/24117

[Third Party Advisory, VDB Entry] http://www.osvdb.org/22469

[Vendor Advisory] http://www.vupen.com/english/advisories/2006/0202

[Vendor Advisory] http://www.cisco.com/warp/public/707/cisco-response-20060113-ip-phones.shtml

[Exploit, Patch] http://securitytracker.com/id?1015488

[Patch, Vendor Advisory] http://secunia.com/advisories/18479

[Exploit] http://downloads.securityfocus.com/vulnerabilities/exploits/cisco_ip7940_dos.pl

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/1411

[Exploit] http://www.securityfocus.com/bid/16200

Scores

EPSS 0.1233

EPSS Percentile 93.9%

Details

CWE

CWE-119

Status published

Products (1)

cisco/ip_phone_7940

Published Jan 11, 2006

Tracked Since Feb 18, 2026