Lucene search

CiscoCVE-2017-6630

HistoryMay 22, 2017 - 1:29 a.m.

CVE-2017-6630

2017-05-2201:29:00

CWE-399

cisco

web.nvd.nist.gov

cisco

ip phone

vulnerability

dos

sip

cisco bug ids

cve-2017-6630

nvd

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

AI Score

5.3

Confidence

High

EPSS

0.002

Percentile

60.3%

JSON

A vulnerability in the Session Initiation Protocol (SIP) implementation of Cisco IP Phone 8851 11.0(0.1) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to an abnormal SIP message. An attacker could exploit this vulnerability by manipulating the CANCEL packet. An exploit could allow the attacker to cause a disruption of service to the phone. Cisco Bug IDs: CSCvc34795.

Affected configurations

Nvd

Node

ciscoip_phone_8800_series_firmwareMatch11.0\(0.1\)

AND

ciscoip_phone_8851Match-

VendorProductVersionCPE
ciscoip_phone_8800_series_firmware11.0(0.1)cpe:2.3:o:cisco:ip_phone_8800_series_firmware:11.0\(0.1\):*:*:*:*:*:*:*
ciscoip_phone_8851-cpe:2.3:h:cisco:ip_phone_8851:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	ip_phone_8800_series_firmware	11.0(0.1)	cpe:2.3:o:cisco:ip_phone_8800_series_firmware:11.0\(0.1\):::::::*
cisco	ip_phone_8851	-	cpe:2.3:h:cisco:ip_phone_8851:-:::::::*

CNA Affected

[
  {
    "product": "Cisco IP Phone 8851",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Cisco IP Phone 8851"
      }
    ]
  }
]

References

www.securityfocus.com/bid/98533

www.securitytracker.com/id/1038511

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-sip

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

AI Score

5.3

Confidence

High

EPSS

0.002

Percentile

60.3%

JSON

Related for CVE-2017-6630