Approved changes feed: RSS · Atom

cpe:2.3:h:avaya:4602sw_ip_phone:r2.2:*:*:*:*:*:*:*

part: h version: r2.2 update: *

VendorAvaya (79b6be94-fcaf-5aa3-ae43-dbb8cc49f79d)
Product4602Sw Ip Phone (bf564140-2129-5f5e-8b87-580304f30237)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-3319 vulnerable 2026-06-08 04:49:53.705179 Details available
The Avaya 4602SW IP Phone (Model 4602D02A) with 2.2.2 and earlier SIP firmware does not use the cnonce parameter in the Authorization header of SIP requests during MD5 digest authentication, which allows remote attackers to conduct man-in-the-middle attacks and hijack or intercept communications.
Published: 2007-06-21T18:00:00.000Z
Updated: 2024-08-07T14:14:12.823Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.