Session Initiation Protocol Vulnerability in Cisco Small Business IP Phones
CVE-2017-12259
7.5HIGH
Key Information:
- Vendor
Cisco
- Vendor
- CVE Published:
- 19 October 2017
What is CVE-2017-12259?
A vulnerability exists in the Session Initiation Protocol (SIP) implementation in Cisco Small Business SPA51x Series IP Phones, allowing remote attackers to cause a denial of service (DoS) condition. This occurs due to improper handling of SIP request messages, enabling attackers to send malformed messages to unprotected devices. Successful exploitation results in the affected IP phones becoming unresponsive, leading to a DoS scenario that requires manual device reboot to restore functionality. Users of Cisco SPA51x Firmware Release 7.6.2SR1 or earlier should take immediate precautions to mitigate potential risks.
Affected Version(s)
Cisco Small Business SPA51x Series IP Phones Cisco Small Business SPA51x Series IP Phones