Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2017-12219

A vulnerability in the handling of IP fragments for the Cisco Small Business SPA300, SPA500, and SPA51x Series IP Phones could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition. The vulnerability is due to the inability to handle many large IP fragments for reassembly in a short duration. An attacker could exploit this vulnerability by sending a crafted stream of IP fragments to the targeted device. An exploit could allow the attacker to cause a DoS condition when the device unexpectedly reloads. Cisco Bug IDs: CSCve82586.

Published

2017-09-21T05:29:00.327

Last Modified

2025-04-20T01:37:25.860

Status

Deferred

Source

[email protected]

Severity

CVSSv3.0: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: COMPLETE
Exploitability Score

10.0

Impact Score

6.9

Weaknesses
  • Type: Secondary
    CWE-399
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System cisco spa_301_firmware 7.6.2 Yes
Hardware cisco spa_301 - No
Operating System cisco spa_303_firmware 7.6.2 Yes
Hardware cisco spa_303 - No
Operating System cisco spa_500ds_firmware 7.6.2 Yes
Hardware cisco spa_500ds - No
Operating System cisco spa_500s_firmware 7.6.2 Yes
Hardware cisco spa_500s - No
Operating System cisco spa_501g_firmware 7.6.2 Yes
Hardware cisco spa_501g - No
Operating System cisco spa_502g_firmware 7.6.2 Yes
Hardware cisco spa_502g - No
Operating System cisco spa_504g_firmware 7.6.2 Yes
Hardware cisco spa_504g - No
Operating System cisco spa_508g_firmware 7.6.2 Yes
Hardware cisco spa_508g - No
Operating System cisco spa_509g_firmware 7.6.2 Yes
Hardware cisco spa_509g - No
Operating System cisco spa_512g_firmware 7.6.2 Yes
Hardware cisco spa_512g - No
Operating System cisco spa_514g_firmware 7.6.2 Yes
Hardware cisco spa_514g - No
References