CVEvulnerability
CVE-2017-6630
5.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2017-05-22
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 5.3 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
- CVSS 2.0 ([email protected])
- 7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:N/A:C
- Weaknesses
- CWE-399
Description
A vulnerability in the Session Initiation Protocol (SIP) implementation of Cisco IP Phone 8851 11.0(0.1) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to an abnormal SIP message. An attacker could exploit this vulnerability by manipulating the CANCEL packet. An exploit could allow the attacker to cause a disruption of service to the phone. Cisco Bug IDs: CSCvc34795.
Affected configurations
• cisco ip phone 8800 series firmware 11.0\(0.1\)
Related
Weakness · not in database (1)
References
- http://www.securityfocus.com/bid/98533 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1038511 www.securitytracker.com
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-sip Vendor Advisory
- http://www.securityfocus.com/bid/98533 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1038511 www.securitytracker.com
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-sip Vendor Advisory