CVE-2007-4553
The Thomson ST 2030 SIP phone with software 1.52.1 allows remote attackers to cause a denial of...
CVE-2007-4553 is a medium vulnerability (CVSS 5.0) in Thomson St 2030 Sip Phone, published August 28, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 8.21%, the 94th percentile. No source names a fixed version.
- Severity
- 5.0 MediumCVSS 2.0, NVD
- Exploit chance
- 8.21%EPSS, 94th percentile
- Exploitation
- None known2 public exploits
- Fixed in
- No fix listedNo source names one
Description
The Thomson ST 2030 SIP phone with software 1.52.1 allows remote attackers to cause a denial of service (device hang) via an INVITE message with a Via header that contains a '/' (slash) instead of the required space following the SIP version number.
Exploit likelihood
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Thomson SpeedTouch ST 2030 (SIP Phone) - SIP Invite Message Remote Denial of Service | 2007-08-27 |
| Exploit-DB | Thomson SpeedTouch ST 2030 (SIP Phone) - Remote Denial of Service | 2007-08-27 |
What each source reports
NVD Score used
The Thomson ST 2030 SIP phone with software 1.52.1 allows remote attackers to cause a denial of service (device hang) via an INVITE message with a Via header that contains a '/' (slash) instead of the required space following the SIP version number.
- Record
CVE-2007-4553- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE ListNo score
The Thomson ST 2030 SIP phone with software 1.52.1 allows remote attackers to cause a denial of service (device hang) via an INVITE message with a Via header that contains a '/' (slash) instead of the required space following the SIP version number.
- Record
CVE-2007-4553- Updated
- 2026-11-02
EUVDEUVD-2007-4536No score
The Thomson ST 2030 SIP phone with software 1.52.1 allows remote attackers to cause a denial of service (device hang) via an INVITE message with a Via header that contains a '/' (slash) instead of the required space following the SIP version number.
- Record
EUVD-2007-4536- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8rpc-f5pg-452pNo score
The Thomson ST 2030 SIP phone with software 1.52.1 allows remote attackers to cause a denial of...
The Thomson ST 2030 SIP phone with software 1.52.1 allows remote attackers to cause a denial of service (device hang) via an INVITE message with a Via header that contains a '/' (slash) instead of the required space following the SIP version number.
- Record
GHSA-8rpc-f5pg-452p- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| aliases, exploits, facts, references, title | Exploit-DB, GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
secunia.com/advisories/26587
securityfocus.com/bid/25446
vupen.com/english/advisories/2007/2988
lists.grok.org.uk/pipermail/full-disclosure/2007-August/065433.html
exchange.xforce.ibmcloud.com/vulnerabilities/36217
securityreason.com/securityalert/3075
securitytracker.com/id?1018603
nvd.nist.gov/vuln/detail/CVE-2007-4553
github.com/advisories/GHSA-8rpc-f5pg-452p