Cisco IOS 15.3 and 15.4, Cisco IOS XE 3.8 through 3.11, and Cisco Unified Communications Manager allow remote attackers to cause a denial of service (device reload) via malformed SIP messages, aka Bug ID CSCuj23293.
CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HCisco IOS XE
OSCisco3.10.0s3.10.1s3.10.1xbs3.10.2s3.11.0s3.8.0s3.8.1s3.8.2s3.9.0as3.9.0s3.9.1as3.9.1s3.9.2sLenovo Thinkcentre E75s Firmware
OSLenovo< m16kt61aSamsung X14j Firmware
OSSamsungt-ms14jakucb-1102.5Sun Opensolaris
OSSunsnv_124Zyxel Gs1900 10hp Firmware
OSZyxel< 2.50\(aazi.0\)c0Zzinc Keymouse Firmware
OSZzinc3.08
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
DoS
CWE
References
Related vulnerabilities
CVE-2023-20198CRITICAL10.0⚠ KEVPL ✓same product
Cisco IOS XE Web UI — nieautoryzowane tworzenie konta z privilege 15
CVE-2018-0151CRITICAL9.8⚠ KEVPL ✓same product
Buffer overflow w QoS Cisco IOS/IOS XE — RCE i DoS przez UDP 18999
CVE-2017-3881CRITICAL9.8⚠ KEVPL ✓same product
RCE w Cisco IOS/IOS XE – podatność protokołu CMP przez Telnet
CVE-2026-20267CRITICAL9.0PL ✓same product
Nieprawidłowa kontrola dostępu w Cisco IOS XE Software (CVE-2026-20267)
CVE-2026-20272CRITICAL9.8PL ✓same product
Cisco IOS XE — improper neutralization of special elements (CWE-74)