CVE-2008-4444 — Cisco Unified IP Phone (aka SIP phone) 7960G and 7940G with firmware P0S3-08-9-00 and possibly other versions before 8.10 allows remote attackers to cause a denial of service (device reboot) or possibly execute arbitrary code via a Realtime Transport Protocol (RTP) packet with malformed headers

Back Back to CVE browser

HIGH

Cisco Unified IP Phone (aka SIP phone) 7960G and 7940G with firmware P0S3-08-9-00 and possibly other versions before 8.10 allows remote attackers to cause a denial of service (device reboot) or possibly execute arbitrary code via a Realtime Transport Protocol (RTP) packet with malformed headers

Published Jan 16, 2009

7.1

HIGH

CVSS 2.0

EPSS 2.60%

Description

Cisco Unified IP Phone (aka SIP phone) 7960G and 7940G with firmware P0S3-08-9-00 and possibly other versions before 8.10 allows remote attackers to cause a denial of service (device reboot) or possibly execute arbitrary code via a Realtime Transport Protocol (RTP) packet with malformed headers.

Affected products

Remediation

No remediation recorded yet.

Metrics

2.60% 0.02597

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 2, 2026.

EPSS probability 0.02597

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (9 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 2, 2026	2.60% (0.02597)	84.80th	v5 (v2026.06.15)
Jun 15, 2026	2.60% (0.02597)	83.26th	v5 (v2026.06.15)
Mar 17, 2025	1.81% (0.01813)	81.63th	v4 (v2025.03.14)
Dec 12, 2024	5.58% (0.05577)	93.53th	v3 (v2023.03.01)
Jan 30, 2024	5.58% (0.05577)	92.53th	v3 (v2023.03.01)
Mar 7, 2023	7.69% (0.07687)	93.10th	v3 (v2023.03.01)
Mar 6, 2023	4.29% (0.04291)	87.64th	v2 (v2022.01.01)
Apr 1, 2022	4.29% (0.04291)	86.39th	v2 (v2022.01.01)
Feb 4, 2022	4.29% (0.04291)	70.14th	v2 (v2022.01.01)

Weaknesses (1)

CWE-20

Improper Input Validation

References (5)

http://securityreason.com/securityalert/4917
third-party-advisoryx_refsource_SREASON
http://www.cisco.com/en/US/docs/voice_ip_comm/cuipph/7960g_7940g/firmware/sip/8_10/english/release/notes/796040sip_810.html
x_refsource_CONFIRM
http://www.securityfocus.com/archive/1/500059/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/33264
vdb-entryx_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilities/47948
vdb-entryx_refsource_XF

Link	Providers	Tags
http://securityreason.com/securityalert/4917		third-party-advisoryx_refsource_SREASON
http://www.cisco.com/en/US/docs/voice_ip_comm/cuipph/7960g_7940g/firmware/sip/8_10/english/release/notes/796040sip_810.html		x_refsource_CONFIRM
http://www.securityfocus.com/archive/1/500059/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/33264		vdb-entryx_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilities/47948		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jan 16, 2009

Updated Aug 7, 2024

Reserved Oct 3, 2008

Link CVE-2008-4444

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2008-4444

Red Hat

Severity n/a

Public date n/a

Links CVE-2008-4444