Cisco IP Phone 7940 Remote Denial of Service Vulnerability

Bugtraq ID:	16200
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Jan 10 2006 12:00AM
Updated:	Jan 14 2006 12:41AM
Credit:	Discovered by kokanin.
Vulnerable:	Cisco IP Phone 7960 Cisco IP Phone 7940
Not Vulnerable:	Cisco IP Phone 7960 7.1 (1) Cisco IP Phone 7940 7.1 (1)

Cisco IP Phone 7940 Remote Denial of Service Vulnerability

Cisco IP Phone 7940 is prone to a remote denial of service vulnerability.

Successful exploitation causes the phone to restart.

Cisco is tracking this issue as Cisco bug ID CSCef33398.

Cisco IP Phone 7940 Remote Denial of Service Vulnerability

The following proof of concept exploit is available:

• /data/vulnerabilities/exploits/cisco_ip7940_dos.pl

Cisco IP Phone 7940 Remote Denial of Service Vulnerability

Solution:
Cisco has released a security notice to address this issue. Version 7.1(1) firmware for affected devices are now capable of throttling incoming connections, and will not reset themselves when attacked. Please see the referenced advisory for further information on obtaining fixed firmware.

Cisco IP Phone 7940 Remote Denial of Service Vulnerability

References:

• Cisco 7900 Series IP Phones (Cisco)
  
• Cisco Security Notice: Response to Cisco IP Phone 7940 DoS Exploit posted on mil (Cisco)