CVE-2007-2270: The Linksys SPA941 VoIP Phone allows remote attackers to cause a denial of service (device reboot) via a 03...

Security readout for executives and security teams

CVE-2007-2270 is a denial-of-service issue in the Linksys SPA941 VoIP phone. A malformed SIP call setup message can reboot the device, disrupting calls. The supplied sources do not show data theft, code execution, or active exploitation. Exposure is most likely in organizations still operating Linksys SPA941 phones where SIP signaling can be reached from untrusted networks or hostile VoIP peers. Exact affected versions are not supplied. Prioritize if SPA941 phones support business-critical voice service or are reachable by untrusted SIP traffic. Otherwise, handle through legacy asset reduction and VoIP segmentation work. Mitigation focus: Check Linksys or successor vendor guidance for fixed firmware or support status.; Restrict SIP signaling to trusted PBX, SBC, or provider addresses.; Block direct internet access to SPA941 management and SIP interfaces..

Prepared

Jun 29, 2026, 05:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.