High severity7.5NVD Advisory· Published Jul 11, 2005· Updated Jun 16, 2026
CVE-2005-2181
CVE-2005-2181
Description
Cisco 7940/7960 Voice over IP (VoIP) phones do not properly check the Call-ID, branch, and tag values in a NOTIFY message to verify a subscription, which allows remote attackers to spoof messages such as the "Messages waiting" message.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:o:cisco:ip_phone_7940_firmware:-:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:cisco:ip_phone_7940_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:ip_phone_7960_firmware:-:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
4- pentest.tele-consulting.com/advisories/05_07_06_voip-phones.txtnvdBroken LinkVendor Advisory
- www.securitytracker.com/alerts/2005/Jul/1014406.htmlnvdBroken LinkThird Party AdvisoryVDB Entry
- exchange.xforce.ibmcloud.com/vulnerabilities/21260nvdThird Party AdvisoryVDB Entry
- marc.infonvdMailing List
News mentions
0No linked articles in our index yet.