Guest

Preview Tool

Cisco Bug: CSCvi24718 - Cisco IP Phone 6800, 7800 and 8800 Series with Multiplatform Firmware SIP DoS Vulnerability

Last Modified

Jun 29, 2018

Products (1)

  • Cisco IP Phone 7800 Series with Multiplatform Firmware

Known Affected Releases

11.1(2)

Description (partial)

Symptom:
A vulnerability in Session Initiation Protocol (SIP) call handling of Cisco IP Phone 7800 Series
with Multiplatform Firmware could allow an unauthenticated, remote attacker to cause a denial of 
service (DoS) condition due to the phone unexpectedly reloading.

This issue only impacts Multiplatform Firmware for Third-Party Call Control.
This issue does NOT impact CUCM registered enterprise On-Prem firmware.

The vulnerability is due to incorrect error handling when a phone call does not complete. An attacker 
could exploit this vulnerability by sending a crafted SIP connection to a targeted phone. An exploit 
could allow the attacker to cause a DoS condition due to the phone reloading.

This advisory is available at the following link:
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-multiplatform-sip

Conditions:
Please refer to the Security Advisory.
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.