CVE-2009-3947: Buffer overflow in the FTP service on the Tandberg MXP F7.0 allows remote attackers to cause a denial of se...

Security readout for executives and security teams

CVE-2009-3947 is an old vulnerability in the FTP service of Tandberg MXP F7.0 video conferencing devices. A remote attacker could crash the FTP process or reboot the device, disrupting service. The record also says arbitrary code execution may be possible, but the provided sources do not confirm real-world exploitation. Exposure is limited to organizations still operating Tandberg MXP F7.0 with FTP enabled, especially where FTP is reachable from untrusted networks or the internet. The source bundle does not identify other affected versions or products. Prioritize if any affected device is internet-facing or supports critical conferencing operations. Business risk is mainly service disruption, with possible but unconfirmed code execution. Treat as legacy exposure requiring containment and vendor-guidance review. Mitigation focus: Identify any Tandberg MXP devices and confirm whether F7.0 is running.; Disable FTP if not required for business operations.; Restrict FTP access to trusted management networks only..

Prepared

Jun 28, 2026, 17:19 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.