← Vulnerability feed

Vulnerability record · CVE-2018-0325 · published 17 May 2018

CVE-2018-0325: Cisco ip phone 8800 firmware improper input validation vulnerability

Cisco · Ip Phone 8800 Firmware

A vulnerability in the Session Initiation Protocol (SIP) call-handling functionality of Cisco IP Phone 7800 Series phones and Cisco IP Phone 8800 Series phones could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected phone. The vulnerability is due to incomplete input validation of SIP Session Description Protocol (SDP) parameters by the SDP parser of an affected phone. An attacker could exploit this vulnerability by sending a malformed SIP packet to an affected phone. A successful exploit could allow the attacker to cause all active phone calls on the affected phone to be dropped while the SIP process on the phone unexpectedly restarts, resulting in a DoS condition. Cisco Bug IDs: CSCvf40066.

7.5 CVSS 3.0 High EPSS 3.3% · top 12.0% CWE-20 · Improper input validation
7.5CVSS 3.0 base score, v2 5.0
3.3%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
6References
17 Jun 2026Last modified by NVD

Description

A vulnerability in the Session Initiation Protocol (SIP) call-handling functionality of Cisco IP Phone 7800 Series phones and Cisco IP Phone 8800 Series phones could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected phone. The vulnerability is due to incomplete input validation of SIP Session Description Protocol (SDP) parameters by the SDP parser of an affected phone. An attacker could exploit this vulnerability by sending a malformed SIP packet to an affected phone. A successful exploit could allow the attacker to cause all active phone calls on the affected phone to be dropped while the SIP process on the phone unexpectedly restarts, resulting in a DoS condition. Cisco Bug IDs: CSCvf40066.

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.securityfocus.com/bid/104202 Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1040927 Third Party AdvisoryVDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180516-ip-phone-dos Vendor Advisory
http://www.securityfocus.com/bid/104202 Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1040927 Third Party AdvisoryVDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180516-ip-phone-dos Vendor Advisory

Track CVE-2018-0325 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2019-1716Cisco ip phone 8821 firmware improper input validation vulnerabilityA vulnerability in the web-based management interface of Session Initiation Protocol (SIP) Software for Cisco IP Phone 7800 Series and Cisco IP Phone…EPSS 3.1%8.8CVE-2019-1764Cisco ip phone 8821 firmware cross-site request forgery vulnerabilityA vulnerability in the web-based management interface of Session Initiation Protocol (SIP) Software for Cisco IP Phone 8800 Series could allow an una…EPSS 0.70%7.5CVE-2019-1763Cisco ip phone 8821 firmware improper access control vulnerabilityA vulnerability in the web-based management interface of Session Initiation Protocol (SIP) Software for Cisco IP Phone 8800 Series could allow an una…EPSS 1.9%7.5CVE-2019-1766Cisco ip phone 8800 firmware improper input validation vulnerabilityA vulnerability in the web-based management interface of Session Initiation Protocol (SIP) Software for Cisco IP Phone 8800 Series could allow an una…EPSS 1.5%6.8CVE-2021-33478Cisco ip phone 8800 firmware memory buffer overflow vulnerabilityThe TrustZone implementation in certain Broadcom MediaxChange firmware could allow an unauthenticated, physically proximate attacker to achieve arbit…EPSS 0.30%6.5CVE-2023-20018Cisco ip phone 7800 firmware authentication bypass via alternate path vulnerabilityA vulnerability in the web-based management interface of Cisco IP Phone 7800 and 8800 Series Phones could allow an unauthenticated, remote attacker t…EPSS 0.61%6.5CVE-2019-1765Cisco ip phone 8821 firmware path traversal vulnerabilityA vulnerability in the web-based management interface of Session Initiation Protocol (SIP) Software for Cisco IP Phone 8800 Series could allow an aut…EPSS 1.4%6.5CVE-2019-1684Cisco ip phone 8800 firmware memory buffer overflow vulnerabilityA vulnerability in the Cisco Discovery Protocol or Link Layer Discovery Protocol (LLDP) implementation for the Cisco IP Phone 7800 and 8800 Series co…EPSS 0.64%

Source: NIST National Vulnerability Database (record CVE-2018-0325), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.