CVE-2015-4226

Published: Jun 30, 2015Modified: May 6, 2026

7.1

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Exploitability: 8.6 / Impact: 6.9

Source: NVD

Description

The packet-storing feature on Cisco 9900 phones with firmware 9.3(2) does not properly support the RTP protocol, which allows remote attackers to cause a denial of service (device hang) by sending malformed RTP packets after a call is answered, aka Bug ID CSCur39976.

Affected (1)

Products: Cisco: Unified Ip Phones 9900 Series Firmware

1 product

Unified Ip Phones 9900 Series Firmware

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Cisco Unified Ip Phones 9900 Series Firmware	Version 9.3(2)

Related CWEs

References (6)

http://tools.cisco.com/security/center/viewAlert.x?alertId=39554

Source: psirt@cisco.com

Vendor Advisory

http://www.securityfocus.com/bid/75471

Source: psirt@cisco.com

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1032748

Source: psirt@cisco.com

Third Party AdvisoryVDB Entry

http://tools.cisco.com/security/center/viewAlert.x?alertId=39554

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/bid/75471

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1032748

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

Timeline

No history available yet.