CVE-2017-12219

First published: Thu Sep 21 2017(Updated: )

A vulnerability in the handling of IP fragments for the Cisco Small Business SPA300, SPA500, and SPA51x Series IP Phones could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition. The vulnerability is due to the inability to handle many large IP fragments for reassembly in a short duration. An attacker could exploit this vulnerability by sending a crafted stream of IP fragments to the targeted device. An exploit could allow the attacker to cause a DoS condition when the device unexpectedly reloads. Cisco Bug IDs: CSCve82586.

Credit: ykramarz@cisco.com

Affected Software	Affected Version	How to fix
Cisco Spa 301 Firmware	=7.6.2
Cisco Spa 301
Cisco Spa 303 Firmware	=7.6.2
Cisco Spa 303
Cisco Spa 500ds Firmware	=7.6.2
Cisco Spa 500ds
Cisco Spa 500s Firmware	=7.6.2
Cisco Spa 500s
Cisco Spa 501g Firmware	=7.6.2
Cisco Spa 501g
Cisco Spa 502g Firmware	=7.6.2
Cisco Spa 502g
Cisco Spa 504g Firmware	=7.6.2
Cisco Spa 504g
Cisco Spa 508g Firmware	=7.6.2
Cisco Spa 508g
Cisco Spa 509g Firmware	=7.6.2
Cisco Spa 509g
Cisco Spa 512g Firmware	=7.6.2
Cisco Spa 512g
Cisco Spa 514g Firmware	=7.6.2
Cisco Spa 514g

Never miss a vulnerability like this again

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

CVE-2017-12219

Never miss a vulnerability like this again

Reference Links

Company

Resources

Contact