cisco-sa-20190320-ipfudos: Cisco IP Phone 8800 Series File Upload Denial of Service Vulnerability
First published: Wed Mar 20 2019(Updated: )
A vulnerability in the web-based management interface of Session Initiation Protocol (SIP) Software for Cisco IP Phone 8800 Series could allow an unauthenticated, remote attacker to cause high disk utilization, resulting in a denial of service (DoS) condition. The vulnerability exists because the affected software does not restrict the maximum size of certain files that can be written to disk. An attacker who has valid administrator credentials for an affected system could exploit this vulnerability by sending a crafted, remote connection request to an affected system. A successful exploit could allow the attacker to write a file that consumes most of the available disk space on the system, causing application functions to operate abnormally and leading to a DoS condition. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190320-ipfudos
Credit: David Gullasch modzero AG
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco IP Phone 8800 key expansion module |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-20190320-ipfudos?
The severity of cisco-sa-20190320-ipfudos is considered high due to the potential for an unauthenticated remote attacker to achieve a denial of service condition.
How do I fix cisco-sa-20190320-ipfudos?
To fix cisco-sa-20190320-ipfudos, users should apply the latest firmware updates provided by Cisco for the IP Phone 8800 Series.
What causes the cisco-sa-20190320-ipfudos vulnerability?
The cisco-sa-20190320-ipfudos vulnerability is caused by insufficient input validation in the web-based management interface of the SIP Software.
Who is affected by cisco-sa-20190320-ipfudos?
The cisco-sa-20190320-ipfudos vulnerability affects users of the Cisco IP Phone 8800 Series, particularly those using the web-based management interface.
What could happen if cisco-sa-20190320-ipfudos is exploited?
If cisco-sa-20190320-ipfudos is exploited, it could lead to high disk utilization on affected devices, potentially resulting in service disruption.
- agent/type
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- collector/cisco-advisory
- source/Cisco
- agent/references
- agent/title
- agent/weakness
- agent/severity
- agent/author
- agent/description
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco ip phone 8800 key expansion module