CVE-2018-0325

CWE-20 — Improper Input Validation4 documents4 sources
Severity
7.5HIGH
EPSS
0.8%
top 26.11%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Cisco IP Phone 7800 FirmwareCisco IP Phone 8800 Firmware
Timeline
PublishedMay 17
Latest updateMay 13

Description

A vulnerability in the Session Initiation Protocol (SIP) call-handling functionality of Cisco IP Phone 7800 Series phones and Cisco IP Phone 8800 Series phones could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected phone. The vulnerability is due to incomplete input validation of SIP Session Description Protocol (SDP) parameters by the SDP parser of an affected phone. An attacker could exploit this vulnerability by sending a malformed SIP pack…

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages3 packages

▶CVEListV5cisco_ip_phone_7800_series_and_8800_seriesCisco IP Phone 7800 Series and 8800 Series
▶NVDcisco/ip_phone_7800_firmware< 12.1\(1.12\)+1
▶NVDcisco/ip_phone_8800_firmware10.3\(1\)sr4, 9.4\(2\)sr4+1

🔴Vulnerability Details

2
GHSA
GHSA-hpxq-c7m9-w2gj: A vulnerability in the Session Initiation Protocol (SIP) call-handling functionality of Cisco IP Phone 7800 Series phones and Cisco IP Phone 8800 Seri↗2022-05-13
▶
CVEList
CVE-2018-0325: A vulnerability in the Session Initiation Protocol (SIP) call-handling functionality of Cisco IP Phone 7800 Series phones and Cisco IP Phone 8800 Seri↗2018-05-17
▶

📋Vendor Advisories

1
Cisco
Cisco IP Phone 7800 Series and 8800 Series and Cisco Wireless IP Phone 8821 Denial of Service Vulnerability↗2018-05-16
▶