PT-2019-1773 · Cisco · Cisco Small Business Spa514G Ip Phone

Publicado 2019-03-13 · Atualizado 2019-10-09 · CVE-2018-0389

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Small Business SPA514G IP Phones versions 7.6.2SR2 and earlier

Description A vulnerability in the implementation of Session Initiation Protocol (SIP) processing could allow an unauthenticated, remote attacker to cause an affected device to become unresponsive, resulting in a denial of service (DoS) condition. The vulnerability is due to improper processing of SIP request messages by an affected device. An attacker could exploit this vulnerability by sending crafted SIP messages to an affected device. A successful exploit could allow the attacker to cause the affected device to become unresponsive, resulting in a DoS condition that persists until the device is restarted manually.

Recommendations For Cisco Small Business SPA514G IP Phones versions 7.6.2SR2 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the SIP protocol to minimize the risk of exploitation. Avoid using the affected SIP implementation until the issue is resolved.

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

BDU:2019-01420

CVE-2018-0389

Produtos afetados

Cisco Small Business Spa514G Ip Phone

Referências · 5

• http://securityfocus.com/bid/107402 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-0389 · Nota de Segurança
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190313-sip · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2019-01420 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-0389 · Aviso do Fabricante