CVE-2018-0332

State: Published
Severity: Not scored
Published: Jun 7, 2018
Updated: Nov 29, 2024
Reserved: Nov 27, 2017

Description

A vulnerability in the Session Initiation Protocol (SIP) ingress packet processing of Cisco Unified IP Phone software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to a lack of flow-control mechanisms in the software. An attacker could exploit this vulnerability by sending high volumes of SIP INVITE traffic to the targeted device. Successful exploitation could allow the attacker to cause a disruption of services on the targeted IP phone. Cisco Bug IDs: CSCve10064, CSCve14617, CSCve14638, CSCve14683, CSCve20812, CSCve20926, CSCve20945.

Scores

The record has no CVSS score.

Weaknesses

CWE-399

Affected Products

Product	Versions
Cisco Unified IP Phone Software unknownn/a	Cisco Unified IP Phone Software unknownAffected

References

104445vdb-entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-ip-phone-dos
1041074vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.