CVE-2017-6656

MEDIUM 5.9CVE-2017-6656 · Published 13/06/2017 · updated 17/06/2026

In short

CVE-2017-6656 is a MEDIUM (CVSS 5.9) vulnerability affecting ip phone 8800 series (cisco).
Chance of exploitation in the next 30 days (EPSS): 1.7%, higher than 76.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
ip phone 8800 series cisco	`= 11.0(0.1)`	No fix yet

Description

A vulnerability in Session Initiation Protocol (SIP) call handling of Cisco IP Phone 8800 Series devices could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition due to the SIP process unexpectedly restarting. All active phone calls are dropped as the SIP process restarts. More Information: CSCvc29353. Known Affected Releases: 11.0(0.1). Known Fixed Releases: 11.0(0)MP2.153 11.0(0)MP2.62.

References

securityfocus.com/bid/98996 · Third Party Advisory
securitytracker.com/id/1038636
tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-sip · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free