CVE-2015-4226
High
Description
The packet-storing feature on Cisco 9900 phones with firmware 9.3(2) does not properly support the RTP protocol, which allows remote attackers to cause a denial of service (device hang) by sending malformed RTP packets after a call is answered, aka Bug ID CSCur39976.
SeverityHigh
CVSS7.1
Exploit probability—
Product
Cisco Unified Ip Phones 9900 Series Firmware
PublishedJun 30, 2015
First seenJun 30, 2015
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco unified_ip_phones_9900_series_firmware | 9.3\(2\) | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.