The Snom 320 SIP Phone, running snom320 linux 3.25, snom320-SIP 6.2.3, and snom320…
Priority LOW 33Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · Partial · Partial
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA.
Summary
The Snom 320 SIP Phone, running snom320 linux 3.25, snom320-SIP 6.2.3, and snom320 jffs23.36, allows remote attackers to place calls to arbitrary phone numbers via certain requests to the web server on port 1800.
Why it matters now
EPSS 0.02159 82nd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 4
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:snom:snom_320_linux:3.25:*:*:*:*:*:*:* | 3.25 | Vulnerable | Snom |
| cpe:2.3:h:snom:320_sip_phone:*:*:*:*:*:*:*:* | all versions | Running on | Snom |
| cpe:2.3:h:snom:320_sip_phone:jffs23.36:*:*:*:*:*:*:* | jffs23.36 | Running on | Snom |
| cpe:2.3:h:snom:320_sip_phone:sip_6.2.3:*:*:*:*:*:*:* | sip_6.2.3 | Running on | Snom |
- cpe:2.3:o:snom:snom_320_linux:3.25:*:*:*:*:*:*:* Versions 3.25 Vulnerable ·Snom
- cpe:2.3:h:snom:320_sip_phone:*:*:*:*:*:*:*:* Versions all versions Running on ·Snom
- cpe:2.3:h:snom:320_sip_phone:jffs23.36:*:*:*:*:*:*:* Versions jffs23.36 Running on ·Snom
- cpe:2.3:h:snom:320_sip_phone:sip_6.2.3:*:*:*:*:*:*:* Versions sip_6.2.3 Running on ·Snom
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2007-3440
- 2026-10-03 Alias added: GHSA-g86j-3x5c-hv2j
More Snom 320 Linux vulnerabilities
- TI-2007-03333 The Snom 320 SIP Phone, running snom320 linux 3.25, snom320-SIP 6.2.3, and snom320… CVSS 2.0MEDIUM 5.0
Sources
- CVE-2007-3440 · CVE Program
- CVE-2007-3440 · NVD
- FIRST EPSS
- GHSA-g86j-3x5c-hv2j · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences