CVE-2017-6630: High severity Cisco Ip Phone 8800 Series Firmware vulnerability
A vulnerability in the Session Initiation Protocol (SIP) implementation of Cisco IP Phone 8851 11.0(0.1) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to an abnormal SIP message. An attacker could exploit this vulnerability by manipulating the CANCEL packet. An exploit could allow the attacker to cause a disruption of service to the phone. Cisco Bug IDs: CSCvc34795.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-6630?
CVE-2017-6630 is categorized as a high severity vulnerability due to its potential to cause a denial of service (DoS).
How do I fix CVE-2017-6630?
To mitigate CVE-2017-6630, upgrade to a patched version of Cisco IP Phone firmware that addresses this vulnerability.
What devices are affected by CVE-2017-6630?
CVE-2017-6630 specifically affects Cisco IP Phone 8851 running firmware version 11.0(0.1).
Can CVE-2017-6630 be exploited remotely?
Yes, an unauthenticated remote attacker can exploit CVE-2017-6630 to cause a denial of service condition.
What causes the vulnerability in CVE-2017-6630?
CVE-2017-6630 is caused by the processing of an abnormal SIP message in the Session Initiation Protocol implementation.