Description
Multiple vulnerabilities in the Cisco Discovery Protocol and Link Layer Discovery Protocol (LLDP) implementations for Cisco IP Phone Series 68xx/78xx/88xx could allow an unauthenticated, adjacent attacker to execute code remotely or cause a reload of an affected IP phone. These vulnerabilities are due to missing checks when the IP phone processes a Cisco Discovery Protocol or LLDP packet. An attacker could exploit these vulnerabilities by sending a malicious Cisco Discovery Protocol or LLDP packet to the targeted IP phone. A successful exploit could allow the attacker to execute code on the affected IP phone or cause it to reload unexpectedly, resulting in a denial of service (DoS) condition.Note: Cisco Discovery Protocol is a Layer 2 protocol. To exploit these vulnerabilities, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent).Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.
Problem types
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Product status
11.1.2
11.2.1
11.2.3
11.2.2
11.2.3 MSR1-1
11.1.2 MSR1-1
11.1.1
11.1.2 MSR3-1
11.0.0
11.1.1 MSR1-1
11.0.1
11.1.1 MSR2-1
11.2.4
11.0.1 MSR1-1
11.0.2
11.3.1
11.3.1 MSR1-3
11.3.2
11.3.1 MSR2-6
11.3.1 MSR3-3
9.0(3)
9.0(2)SR2
9.0(2)SR1
9.2(1)
9.4(2)SR1
9.4(2)
9.4(2)SR2
9.4(2)SR3
9.3(1)SR2
9.3(1)SR3
9.3(1)SR1
9.1(1)SR1
9.3(1)SR4
9.2(3)
9.2(1)SR2
9.3(1)
9.4(2)SR4
12.1(1)SR1
11.5(1)
10.3(2)
10.2(2)
10.3(1)
10.3(1)SR4
11.0(1)
10.4(1)SR2 3rd Party
11.7(1)
12.1(1)
11.0(0.7) MPP
9.3(4) 3rd Party
12.5(1)SR2
10.2(1)SR1
9.3(4)SR3 3rd Party
10.2(1)
12.5(1)
10.3(1)SR2
11-0-1MSR1-1
10.4(1) 3rd Party
12.5(1)SR1
11.5(1)SR1
10.1(1)SR2
12.0(1)SR2
12.6(1)
10.3(1.11) 3rd Party
12.0(1)
12.0(1)SR1
9.3(3)
12.5(1)SR3
10.3(1)SR4b
9.3(4)SR1 3rd Party
10.3(1)SR5
10.1(1.9)
10.3(1.9) 3rd Party
9.3(4)SR2 3rd Party
10.3(1)SR1
10.3(1)SR3
10.1(1)SR1
12.0(1)SR3
12.6(1)SR1
12.7(1)
10.3(1)SR6
12.8(1)
12.7(1)SR1
11.0(2)SR1
11.0(4)
11.0(2)
11.0(4)SR3
11.0(5)
11.0(3)SR2
11.0(3)SR4
11.0(3)SR3
11.0(2)SR2
11.0(4)SR1
11.0(5)SR3
11.0(3)
11.0(5)SR2
11.0(3)SR6
11.0(5)SR1
11.0(4)SR2
11.0(3)SR1
11.0(3)SR5
7.4.8
7.4.3
7.5.5a
7.3.7
7.5.2
7.5.1
7.4.6
7.5.7
7.4.4
7.6.2SR3
7.6.2
7.5.6
7.5.6c
7.6.0
7.4.7
7.6.2SR6
7.5.2b
7.5.5
7.5.6a
7.6.2SR2
7.5.3
7.5.2a
7.5.6(XU)
7.5.7s
7.6.2SR4
7.6.2SR1
7.4.9
7.5.5b
7.6.2SR5
7.5.4
7.6.1
7.6.2SR7
References
sec.cloudapps.cisco.com/...cisco-sa-ipphone-rce-dos-U2PsSkz3 (cisco-sa-ipphone-rce-dos-U2PsSkz3)
sec.cloudapps.cisco.com/...y/cisco-sa-webex-distupd-N87eB6Z3