Buffer overflow in Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SCCP and…
Priority MEDIUM 51CWE-119Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- Complete · Complete · Complete
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-119 and the CVSS impact.
Summary
Buffer overflow in Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SCCP and SIP firmware might allow remote attackers to execute arbitrary code via a crafted DNS response.
Why it matters now
EPSS 0.05359 92nd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 14
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:h:cisco:unified_ip_phone:7906g:*:*:*:*:*:*:* | 7906g | Running on | Cisco |
| cpe:2.3:h:cisco:unified_ip_phone:7911g:*:*:*:*:*:*:* | 7911g | Running on | Cisco |
| cpe:2.3:h:cisco:unified_ip_phone:7935:*:*:*:*:*:*:* | 7935 | Running on | Cisco |
| cpe:2.3:h:cisco:unified_ip_phone:7936:*:*:*:*:*:*:* | 7936 | Running on | Cisco |
| cpe:2.3:h:cisco:unified_ip_phone:7940:*:*:*:*:*:*:* | 7940 | Running on | Cisco |
| cpe:2.3:h:cisco:unified_ip_phone:7940g:*:*:*:*:*:*:* | 7940g | Running on | Cisco |
| cpe:2.3:h:cisco:unified_ip_phone:7941g:*:*:*:*:*:*:* | 7941g | Running on | Cisco |
| cpe:2.3:h:cisco:unified_ip_phone:7960:*:*:*:*:*:*:* | 7960 | Running on | Cisco |
| cpe:2.3:h:cisco:unified_ip_phone:7960g:*:*:*:*:*:*:* | 7960g | Running on | Cisco |
| cpe:2.3:h:cisco:unified_ip_phone:7961g:*:*:*:*:*:*:* | 7961g | Running on | Cisco |
- cpe:2.3:h:cisco:unified_ip_phone:7906g:*:*:*:*:*:*:* Versions 7906g Running on ·Cisco
- cpe:2.3:h:cisco:unified_ip_phone:7911g:*:*:*:*:*:*:* Versions 7911g Running on ·Cisco
- cpe:2.3:h:cisco:unified_ip_phone:7935:*:*:*:*:*:*:* Versions 7935 Running on ·Cisco
- cpe:2.3:h:cisco:unified_ip_phone:7936:*:*:*:*:*:*:* Versions 7936 Running on ·Cisco
- cpe:2.3:h:cisco:unified_ip_phone:7940:*:*:*:*:*:*:* Versions 7940 Running on ·Cisco
- cpe:2.3:h:cisco:unified_ip_phone:7940g:*:*:*:*:*:*:* Versions 7940g Running on ·Cisco
- cpe:2.3:h:cisco:unified_ip_phone:7941g:*:*:*:*:*:*:* Versions 7941g Running on ·Cisco
- cpe:2.3:h:cisco:unified_ip_phone:7960:*:*:*:*:*:*:* Versions 7960 Running on ·Cisco
- cpe:2.3:h:cisco:unified_ip_phone:7960g:*:*:*:*:*:*:* Versions 7960g Running on ·Cisco
- cpe:2.3:h:cisco:unified_ip_phone:7961g:*:*:*:*:*:*:* Versions 7961g Running on ·Cisco
Show 4 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:h:cisco:unified_ip_phone:7970g:*:*:*:*:*:*:* | 7970g | Running on | Cisco |
| cpe:2.3:h:cisco:unified_ip_phone:7971g:*:*:*:*:*:*:* | 7971g | Running on | Cisco |
| cpe:2.3:a:cisco:skinny_client_control_protocol_\(sccp\)_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Cisco |
| cpe:2.3:a:cisco:session_initiation_protocol_\(sip\)_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Cisco |
- cpe:2.3:h:cisco:unified_ip_phone:7970g:*:*:*:*:*:*:* Versions 7970g Running on ·Cisco
- cpe:2.3:h:cisco:unified_ip_phone:7971g:*:*:*:*:*:*:* Versions 7971g Running on ·Cisco
- cpe:2.3:a:cisco:skinny_client_control_protocol_\(sccp\)_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Cisco
- cpe:2.3:a:cisco:session_initiation_protocol_\(sip\)_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Cisco
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2008-0530
- 2026-10-03 Alias added: GHSA-v7mq-3qjg-gc4w
References
More Cisco Session Initiation Protocol (sip) Firmware vulnerabilities
- TI-2008-00501 Buffer overflow in the telnet server in Cisco Unified IP Phone 7906G, 7911G, 7941G… CVSS 2.0HIGH 10.0
- TI-2008-00500 Buffer overflow in Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SIP… CVSS 2.0HIGH 10.0
- TI-2008-00503 Heap-based buffer overflow in Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running… CVSS 2.0HIGH 9.3
- TI-2008-00499 The HTTP server in Cisco Unified IP Phone 7935 and 7936 running SCCP firmware allows… CVSS 2.0HIGH 7.8
- TI-2008-00498 Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SCCP firmware allows remote… CVSS 2.0HIGH 7.8
Sources
- CVE-2008-0530 · CVE Program
- CVE-2008-0530 · NVD
- FIRST EPSS
- GHSA-v7mq-3qjg-gc4w · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences