VULNERABILITY INTELLIGENCE
CVE-2007-3347
CVSS score7.8 HIGH
EPSS probability1.25%
CISA KEVNot currently listed
Published2007-06-22
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:C/A:N
Description
The D-Link DPH-540/DPH-541 phone accepts SIP INVITE messages that are not from the Call Server's IP address, which allows remote attackers to engage in arbitrary SIP communication with the phone, as demonstrated by communication with forged caller ID.