1 results (0.001 seconds)

CVSS: 7.5EPSS: 0%CPEs: 4EXPL: 0

10 Jul 2005 — Cisco 7940/7960 Voice over IP (VoIP) phones do not properly check the Call-ID, branch, and tag values in a NOTIFY message to verify a subscription, which allows remote attackers to spoof messages such as the "Messages waiting" message. • http://marc.info/?l=bugtraq&m=112067698624686&w=2 • CWE-347: Improper Verification of Cryptographic Signature •