中文描述:

Cisco IP Phone 6800、7800和8800 Series Phones都是美国思科（Cisco）公司的不同系列的IP电话产品。Multiplatform Firmware是其中的一套支持多平台的防火墙软件。 使用Multiplatform Firmware 11.1(2)之前版本的Cisco IP Phone 6800、7800和8800 Series Phones中的Session Initiation Protocol (SIP)通话处理功能存在资源管理错误漏洞，该漏洞源于固件没有正确的处理当打进的电话没有接听时出现的错误。远程攻击者可通过发送恶意制作的SIP数据包利用该漏洞造成手机重新加载，导致拒绝服务。

英文描述:

A vulnerability in the Session Initiation Protocol (SIP) call-handling functionality of Cisco IP Phone 6800, 7800, and 8800 Series Phones with Multiplatform Firmware could allow an unauthenticated, remote attacker to cause an affected phone to reload unexpectedly, resulting in a temporary denial of service (DoS) condition. The vulnerability exists because the firmware of an affected phone incorrectly handles errors that could occur when an incoming phone call is not answered. An attacker could exploit this vulnerability by sending a set of maliciously crafted SIP packets to an affected phone. A successful exploit could allow the attacker to cause the affected phone to reload unexpectedly, resulting in a temporary DoS condition. This vulnerability affects Cisco IP Phone 6800, 7800, and 8800 Series Phones with Multiplatform Firmware if they are running a Multiplatform Firmware release prior to Release 11.1(2). Cisco Bug IDs: CSCvi24718.

CWE类型:

标签:

中文解决方案:

英文解决方案:

临时解决方案: