VULNERABILITY INTELLIGENCE
CVE-2007-5361
CVSS score8.5 HIGH
EPSS probability2.35%
CISA KEVNot currently listed
Published2007-11-20
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:C
Description
The Communication Server in Alcatel-Lucent OmniPCX Enterprise 7.1 and earlier caches an IP address during a TFTP request from an IP Touch phone, and uses this IP address as the destination for all subsequent VoIP packets to this phone, which allows remote attackers to cause a denial of service (loss of audio) or intercept voice communications via a crafted TFTP request containing the phone's MAC address in the filename.