CVE-2007-3317 describes a denial-of-service vulnerability in the Session Initiation Protocol (SIP) User Access Client (UAC) message parsing module of Avaya one-X Desktop Edition 2.1.0.70 and earlier. A remote unauthenticated attacker can exploit this by sending a specially crafted, malformed SIP message, leading to a device crash. This vulnerability has a high CVSS score of 7.8, indicating a critical impact on availability with low attack complexity and no authentication required. There is no public exploit intelligence, such as Metasploit modules or ExploitDB entries, and it has not been added to the CISA KEV catalog. Community discussion and media coverage for this CVE are minimal, suggesting it has not garnered significant attention.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 2.1.0.70CPE matchmatch criteria | cpe:2.3:a:avaya:one-x:*:*:desktop:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:N/I:N/A:C
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.