Riskcovery

CVE-2026-20281

Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Software Denial of Service Vulnerability

State
Published
Severity
7.5 High
Published
Sep 2, 2026
Updated
Sep 2, 2026
Reserved
Oct 8, 2025

Read the record on cve.org

Description

A vulnerability in Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 that are running Cisco Session Initiation Protocol (SIP) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.

This vulnerability is due to improper memory management when an affected device processes HTTP packets. An attacker could exploit this vulnerability by sending a continuous stream of crafted HTTP packets to the device. A successful exploit could allow the attacker to cause the affected device to continuously consume memory, resulting in a DoS condition. A manual reboot of the device is required to recover from this condition. Note: For this vulnerability to be exploitable, the phone must be registered to Cisco Unified Communications Manager (Unified CM) and have Web Access enabled. Web Access is disabled by default.

Scores

CVSSScoreVectorSource
3.17.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hcisco

Weaknesses

  • CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

ProductVersions
Cisco Session Initiation Protocol (SIP) SoftwareCisco
  • 12.1(1)SR1Affected
  • 11.5(1)Affected
  • 10.3(2)Affected
  • 10.2(2)Affected
  • 10.3(1)Affected
  • 10.3(1)SR4Affected
  • 11.0(1)Affected
  • 10.4(1)SR2 3rd PartyAffected
  • 11.7(1)Affected
  • 12.1(1)Affected
  • 11.0(0.7) MPPAffected
  • 9.3(4) 3rd PartyAffected
  • 12.5(1)SR2Affected
  • 10.2(1)SR1Affected
  • 9.3(4)SR3 3rd PartyAffected
  • 10.2(1)Affected
  • 12.5(1)Affected
  • 10.3(1)SR2Affected
  • 11-0-1MSR1-1Affected
  • 10.4(1) 3rd PartyAffected
  • 12.5(1)SR1Affected
  • 11.5(1)SR1Affected
  • 10.1(1)SR2Affected
  • 12.0(1)SR2Affected
  • 12.6(1)Affected
  • and 85 more versions

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.