snom records
8 published records for vendor snom.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Records by year
Bar: total · dark part: CISA KEV.
Recurring classes
- CWE-352 Cross-Site Request Forgery (CSRF)2
- CWE-20 Improper Input Validation1
- CWE-264 Permissions, Privileges, and Access Controls1
- CWE-290 Authentication Bypass by Spoofing1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
8 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
41Plan | CVE-2009-1048No exploit | The web interface on the snom VoIP phones snom 300, snom 320, snom 360, snom 370, and snom 820 with firmware 6.5 before 6.5.20, 7.1 before 7snom · snom 300 firmware · CWE-290 | Critical9.8 | — | 6.3% | Aug 14, 2009 |
37Monitor | CVE-2008-1249No exploit | snomControl.swf in the central phone server for the Snom 320 SIP Phone allows remote attackers to cause a denial of service (application crasnom · 320 sip phone · CWE-20 | Critical9.4 | — | 1.3% | Mar 10, 2008 |
37Monitor | CVE-2008-1250No exploit | Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface on the central phone server for the Snom 320 SIP Phone allowsnom · 320 sip phone · CWE-352 | Critical9.3 | — | 0.9% | Mar 10, 2008 |
26Monitor | CVE-2007-3440No exploit | The Snom 320 SIP Phone, running snom320 linux 3.25, snom320-SIP 6.2.3, and snom320 jffs23.36, allows remote attackers to place calls to arbisnom · snom 320 linux | Medium6.4 | — | 2.1% | Jun 26, 2007 |
23Monitor | CVE-2008-1248No exploit | The web interface on the central phone server for the Snom 320 SIP Phone allows remote attackers to make arbitrary phone calls via the "Callsnom · 320 sip phone · CWE-352 | Medium5.8 | — | 0.5% | Mar 10, 2008 |
21Monitor | CVE-2007-3439No exploit | The Snom 320 SIP Phone, running snom320 linux 3.25, snom320-SIP 6.2.3, and snom320 jffs23.36, allows remote attackers to read a list of misssnom · snom 320 linux | Medium5.0 | — | 1.8% | Jun 26, 2007 |
17Monitor | CVE-2008-1251No exploit | Cross-site scripting (XSS) vulnerability in the web interface on the central phone server for the Snom 320 SIP Phone allows remote attackerssnom · 320 sip phone · CWE-79 | Medium4.3 | — | 1.0% | Mar 10, 2008 |
13Monitor | CVE-2010-2291No exploit | Unspecified vulnerability in the web interface in snom VoIP Phone firmware 8 before 8.2.35 allows remote attackers to bypass intended restrisnom · voip phone firmware · CWE-264 | Low3.3 | — | 0.7% | Jun 15, 2010 |
- CVE-2009-104841Plan
The web interface on the snom VoIP phones snom 300, snom 320, snom 360, snom 370, and snom 820 with firmware 6.5 before 6.5.20, 7.1 before 7
CriticalCVSS 9.8No exploitEPSS 6%snom · snom 300 firmwareAug 14, 2009
- CVE-2008-124937Monitor
snomControl.swf in the central phone server for the Snom 320 SIP Phone allows remote attackers to cause a denial of service (application cra
CriticalCVSS 9.4No exploitEPSS 1%snom · 320 sip phoneMar 10, 2008
- CVE-2008-125037Monitor
Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface on the central phone server for the Snom 320 SIP Phone allow
CriticalCVSS 9.3No exploitEPSS 0%snom · 320 sip phoneMar 10, 2008
- CVE-2007-344026Monitor
The Snom 320 SIP Phone, running snom320 linux 3.25, snom320-SIP 6.2.3, and snom320 jffs23.36, allows remote attackers to place calls to arbi
MediumCVSS 6.4No exploitEPSS 2%snom · snom 320 linuxJun 26, 2007
- CVE-2008-124823Monitor
The web interface on the central phone server for the Snom 320 SIP Phone allows remote attackers to make arbitrary phone calls via the "Call
MediumCVSS 5.8No exploitEPSS 0%snom · 320 sip phoneMar 10, 2008
- CVE-2007-343921Monitor
The Snom 320 SIP Phone, running snom320 linux 3.25, snom320-SIP 6.2.3, and snom320 jffs23.36, allows remote attackers to read a list of miss
MediumCVSS 5.0No exploitEPSS 1%snom · snom 320 linuxJun 26, 2007
- CVE-2008-125117Monitor
Cross-site scripting (XSS) vulnerability in the web interface on the central phone server for the Snom 320 SIP Phone allows remote attackers
MediumCVSS 4.3No exploitEPSS 1%snom · 320 sip phoneMar 10, 2008
- CVE-2010-229113Monitor
Unspecified vulnerability in the web interface in snom VoIP Phone firmware 8 before 8.2.35 allows remote attackers to bypass intended restri
LowCVSS 3.3No exploitEPSS 0%snom · voip phone firmwareJun 15, 2010