A vulnerability was found in Cisco IP Phone 6800, IP Phone 7800 and IP Phone 8800 (IP Phone Software). It has been classified as problematic. This affects an unknown code block of the component Session Initiation Protocol. The manipulation as part of a SIP Packet leads to a resource management vulnerability. CWE is classifying the issue as CWE-399. This is going to have an impact on availability. The summary by CVE is:

A vulnerability in the Session Initiation Protocol (SIP) call-handling functionality of Cisco IP Phone 6800, 7800, and 8800 Series Phones with Multiplatform Firmware could allow an unauthenticated, remote attacker to cause an affected phone to reload unexpectedly, resulting in a temporary denial of service (DoS) condition. The vulnerability exists because the firmware of an affected phone incorrectly handles errors that could occur when an incoming phone call is not answered. An attacker could exploit this vulnerability by sending a set of maliciously crafted SIP packets to an affected phone. A successful exploit could allow the attacker to cause the affected phone to reload unexpectedly, resulting in a temporary DoS condition. This vulnerability affects Cisco IP Phone 6800, 7800, and 8800 Series Phones with Multiplatform Firmware if they are running a Multiplatform Firmware release prior to Release 11.1(2). Cisco Bug IDs: CSCvi24718.

The bug was discovered 06/06/2018. The weakness was shared 06/07/2018 as cisco-sa-20180606-multiplatfor as confirmed advisory (Website). The advisory is shared at tools.cisco.com. This vulnerability is uniquely identified as CVE-2018-0316 since 11/27/2017. It is possible to initiate the attack remotely. No form of authentication is needed for exploitation. Neither technical details nor an exploit are publicly available.

The vulnerability was handled as a non-public zero-day exploit for at least 1 days. During that time the estimated underground price was around $5k-$25k.

Upgrading to version 11.1(2) eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at SecurityTracker (ID 1041073†). Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Type

• IP Phone Software

Vendor

• Cisco

Name

• IP Phone 6800
• IP Phone 7800
• IP Phone 8800

Version

• 4.5
• 4.6
• 4.6 MSR1
• 4.7.1
• 4.8.1
• 4.8.1 SR1
• 5.0.1
• 5.1
• 5.1.1
• 5.1.2
• 11-3-1MPPSR4UPG
• 11-3-1MSR2UPG
• 11.0.0
• 11.0.1
• 11.0.1 MSR1-1
• 11.0.2

License

• commercial

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion