Skip to content

CVE-2007-3369

Buffer overflow in the Polycom SoundPoint IP 601 SIP phone with BootROM 3.0.x+ and SIP version 1...

7.8 High

CVE-2007-3369 is a high vulnerability (CVSS 7.8) in Polycom Soundpoint Ip 601, published June 22, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.22%, the 82nd percentile. No source names a fixed version.

Buffer overflow in the Polycom SoundPoint IP 601 SIP phone with BootROM 3.0.x+ and SIP version 1.6.3.0067 allows remote attackers to cause a denial of service (device hang or reboot) via an INVITE message with a long Via header.

Exploit likelihood

2.22%Up 0.9 points since Feb 4, 2022

What each source reports

NVD Score used 7.8

Buffer overflow in the Polycom SoundPoint IP 601 SIP phone with BootROM 3.0.x+ and SIP version 1.6.3.0067 allows remote attackers to cause a denial of service (device hang or reboot) via an INVITE message with a long Via header.

Record: CVE-2007-3369
CVSS 2.0: 7.8 HighAV:N/AC:L/Au:N/C:N/I:N/A:C
Weakness: CWE-119
Updated: 2026-11-02

CVE List No score

Buffer overflow in the Polycom SoundPoint IP 601 SIP phone with BootROM 3.0.x+ and SIP version 1.6.3.0067 allows remote attackers to cause a denial of service (device hang or reboot) via an INVITE message with a long Via header.

Record: CVE-2007-3369
Updated: 2026-11-02

EUVDEUVD-2007-3359 No score

Buffer overflow in the Polycom SoundPoint IP 601 SIP phone with BootROM 3.0.x+ and SIP version 1.6.3.0067 allows remote attackers to cause a denial of service (device hang or reboot) via an INVITE message with a long Via header.

Record: EUVD-2007-3359
Updated: 2026-11-03

GitHub AdvisoriesGHSA-24wg-c2m3-qxmv No score

Buffer overflow in the Polycom SoundPoint IP 601 SIP phone with BootROM 3.0.x+ and SIP version 1...

Buffer overflow in the Polycom SoundPoint IP 601 SIP phone with BootROM 3.0.x+ and SIP version 1.6.3.0067 allows remote attackers to cause a denial of service (device hang or reboot) via an INVITE message with a long Via header.

Record: GHSA-24wg-c2m3-qxmv
Weakness: CWE-119
Updated: 2026-11-02

Affected products

polycom soundpoint ip 601

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	aliases, references, title	GitHub Advisories
2026-11-02	created	CVE List, NVD

References

Show 5 moreShow less