Snom

Records8All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Snom records in CISA KEV

No Snom vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

320 Sip Phone 4 records MEDIUM Snom 320 Linux 2 records LOW Snom 300 Firmware 1 record MEDIUM Snom 320 Firmware 1 record MEDIUM Snom 360 Firmware 1 record MEDIUM Snom 370 Firmware 1 record MEDIUM Snom 820 Firmware 1 record MEDIUM Voip Phone Firmware 1 record LOW

Records

4 records in 320 Sip Phone · all components

TI-2008-01200 CVE-2008-1249 · GHSA-9mxg-m7cv-5jp5

snomControl.swf in the central phone server for the Snom 320 SIP Phone allows remote…

MEDIUM 43

snomControl.swf in the central phone server for the Snom 320 SIP Phone allows remote attackers to cause a denial of service (application crash and corruption of call logs) via a "'); (double quote, quote, close parenthes…

CVSS 2.0HIGH 9.4 Network No auth Interaction — EPSS 0.01385 Published 2008-03-10 No fix listed CWE-20

TI-2008-01201 CVE-2008-1250 · GHSA-mh6w-83mx-cmc6

Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface on the…

MEDIUM 42

Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface on the central phone server for the Snom 320 SIP Phone allow remote attackers to perform actions as the phone user, as demonstrated by inser…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.00934 Published 2008-03-10 No fix listed CWE-352

TI-2008-01199 CVE-2008-1248 · GHSA-742g-v868-m787

The web interface on the central phone server for the Snom 320 SIP Phone allows remote…

LOW 27

The web interface on the central phone server for the Snom 320 SIP Phone allows remote attackers to make arbitrary phone calls via the "Call a number" field.

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.00595 Published 2008-03-10 No fix listed CWE-352

TI-2008-01202 CVE-2008-1251 · GHSA-3gh7-m3jw-66v6

Cross-site scripting (XSS) vulnerability in the web interface on the central phone server…

LOW 22

Cross-site scripting (XSS) vulnerability in the web interface on the central phone server for the Snom 320 SIP Phone allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01065 Published 2008-03-10 No fix listed CWE-79

Open these records in search →

Critical	3
High	0
Medium	4
Low	1
No CVSS	0