Cisco Bug: CSCvi24718 - Cisco IP Phone 6800, 7800 and 8800 Series with Multiplatform Firmware SIP DoS Vulnerability
Jun 29, 2018
- Cisco IP Phone 7800 Series with Multiplatform Firmware
Known Affected Releases
Symptom: A vulnerability in Session Initiation Protocol (SIP) call handling of Cisco IP Phone 7800 Series with Multiplatform Firmware could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition due to the phone unexpectedly reloading. This issue only impacts Multiplatform Firmware for Third-Party Call Control. This issue does NOT impact CUCM registered enterprise On-Prem firmware. The vulnerability is due to incorrect error handling when a phone call does not complete. An attacker could exploit this vulnerability by sending a crafted SIP connection to a targeted phone. An exploit could allow the attacker to cause a DoS condition due to the phone reloading. This advisory is available at the following link: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-multiplatform-sip Conditions: Please refer to the Security Advisory.
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.
Bug Details Include
- Full Description (including symptoms, conditions and workarounds)
- Known Fixed Releases
- Related Community Discussions
- Number of Related Support Cases