Cisco 7940/7960 Voice over IP (VoIP) phones do not properly check the Call-ID, branch, and tag values in a NOTIFY message to verify a subscription, which allows remote attackers to spoof messages such as the "Messages waiting" message.
Threat-Mapped Scoring
Score: 0.0
Priority: Unclassified
EPSS
Score: 0.00363 Percentile:
0.57659
CVSS Scoring
CVSS v3.1 Score: 7.5
Severity: HIGH
Mapped CWE(s)
CWE-347
: Improper Verification of Cryptographic Signature
All CAPEC(s)
CAPEC-463: Padding Oracle Crypto Attack
CAPEC-475: Signature Spoofing by Improper Validation