Описание
The Session Initiation Protocol (SIP) implementation in multiple dynamicsoft products including y and certain demo products for AppEngine allows remote attackers to cause a denial of service or execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test suite.
Ссылки
- Third Party AdvisoryUS Government Resource
- Vendor Advisory
- Exploit
- Third Party AdvisoryUS Government Resource
- Third Party AdvisoryUS Government Resource
- Vendor Advisory
- Exploit
- Third Party AdvisoryUS Government Resource
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:dynamicsoft:appengine:*:*:*:*:*:*:*:*
EPSS
Процентиль: 91%
0.05087
Низкий
7.5 High
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
больше 4 лет назад
The Session Initiation Protocol (SIP) implementation in multiple dynamicsoft products including y and certain demo products for AppEngine allows remote attackers to cause a denial of service or execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test suite.
EPSS
Процентиль: 91%
0.05087
Низкий
7.5 High
CVSS2
Дефекты
NVD-CWE-Other