What is the severity of cisco-sa-20180516-ip-phone-dos?

The severity of cisco-sa-20180516-ip-phone-dos is classified as a denial of service vulnerability.

How do I fix cisco-sa-20180516-ip-phone-dos?

To fix cisco-sa-20180516-ip-phone-dos, update your Cisco IP Phone 7800 Series, 8800 Series, or Wireless IP Phone 8821 to the latest software version provided by Cisco.

What devices are affected by cisco-sa-20180516-ip-phone-dos?

The devices affected by cisco-sa-20180516-ip-phone-dos include Cisco IP Phone 7800 Series, IP Phone 8800 Series, and Wireless IP Phone 8821.

What symptoms indicate a denial of service due to cisco-sa-20180516-ip-phone-dos?

Symptoms of a denial of service due to cisco-sa-20180516-ip-phone-dos include unresponsive IP phones and inability to initiate calls.

Who can exploit the cisco-sa-20180516-ip-phone-dos vulnerability?

An unauthenticated, remote attacker can exploit the cisco-sa-20180516-ip-phone-dos vulnerability.

Vulnerability/
cisco-sa-20180516-ip-phone-dos

medium

5.8

CWE

16/5/2018

cisco-sa-20180516-ip-phone-dos: Cisco IP Phone 7800 Series and 8800 Series and Cisco Wireless IP Phone 8821 Denial of Service Vulnerability

First published: Wed May 16 2018(Updated: )

A vulnerability in the Session Initiation Protocol (SIP) call-handling functionality of Cisco IP Phone 7800 Series, IP Phone 8800 Series, and Wireless IP Phone 8821 could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected phone. The vulnerability is due to incomplete input validation of SIP Session Description Protocol (SDP) parameters by the SDP parser of an affected phone. An attacker could exploit this vulnerability by sending a malformed SIP packet to an affected phone. A successful exploit could allow the attacker to cause all active phone calls on the affected phone to be dropped while the SIP process on the phone unexpectedly restarts, resulting in a DoS condition. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180516-ip-phone-dos

Credit: Mozilla.

Affected Software	Affected Version	How to fix
Cisco IP Phone 7800 Series Firmware
Cisco IP Phone 8800 Series Software
Cisco Wireless IP Phone 8821-EX

Never miss a vulnerability like this again

Reference Links

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180516-ip-phone-dos (Advisory)

Child vulnerabilities

(Contains the following vulnerabilities)

CVE-2018-0325

Frequently Asked Questions

What is the severity of cisco-sa-20180516-ip-phone-dos?
The severity of cisco-sa-20180516-ip-phone-dos is classified as a denial of service vulnerability.
How do I fix cisco-sa-20180516-ip-phone-dos?
To fix cisco-sa-20180516-ip-phone-dos, update your Cisco IP Phone 7800 Series, 8800 Series, or Wireless IP Phone 8821 to the latest software version provided by Cisco.
What devices are affected by cisco-sa-20180516-ip-phone-dos?
The devices affected by cisco-sa-20180516-ip-phone-dos include Cisco IP Phone 7800 Series, IP Phone 8800 Series, and Wireless IP Phone 8821.
What symptoms indicate a denial of service due to cisco-sa-20180516-ip-phone-dos?
Symptoms of a denial of service due to cisco-sa-20180516-ip-phone-dos include unresponsive IP phones and inability to initiate calls.
Who can exploit the cisco-sa-20180516-ip-phone-dos vulnerability?
An unauthenticated, remote attacker can exploit the cisco-sa-20180516-ip-phone-dos vulnerability.

agent/type
agent/event
agent/first-publish-date
agent/last-modified-date
collector/cisco-advisory
source/Cisco
agent/severity
agent/author
agent/references
agent/weakness
agent/title
agent/description
agent/source
agent/softwarecombine
agent/tags
agent/guess-ai
agent/software-canonical-lookup
agent/software-canonical-lookup-request
vendor/cisco
canonical/cisco ip phone 7800 series firmware
canonical/cisco ip phone 8800 series software
canonical/cisco wireless ip phone 8821-ex