Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Software Denial of Service Vulnerability
A vulnerability in Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 that are running Cisco Session Initiation Protocol (SIP) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper memory management when an affected device processes HTTP packets. An attacker could exploit this vulnerability by sending a continuous stream of crafted HTTP packets to the device. A successful exploit could allow the attacker to cause the affected device to continuously consume memory, resulting in a DoS condition. A manual reboot of the device is required to recover from this condition. Note: For this vulnerability to be exploitable, the phone must be registered to Cisco Unified Communications Manager (Unified CM) and have Web Access enabled. Web Access is disabled by default. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-20281US | high7.5 | — | ||
A vulnerability in Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 that are running Cisco Session Initiation Protocol (SIP) Software c… | ||||
references
External citations — patches, advisories, analysis.
- Security Vulnerability Policyexternal
- Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Software Denial of Service Vulnerabilityself
- Cisco Security Vulnerability Policyexternal
- fixed software releaseexternal
- Cisco Support and Downloadsexternal
- Cisco Technical Assistance Center (TAC)external
- Bulk Administration Guide for Cisco Unified Communications Managerexternal
- the advisoriesexternal
remediations (110)
- Fixed10.1(1)SR1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed10.1(1)SR2
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed10.1(1.9)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed10.2(1)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed10.2(1)SR1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed10.2(2)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed10.3(1)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed10.3(1)SR1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed10.3(1)SR2
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed10.3(1)SR3
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed10.3(1)SR4
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed10.3(1)SR4b
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed10.3(1)SR5
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed10.3(1)SR6
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed10.3(1)SR7
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed10.3(1.11) 3rd Party
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed10.3(1.9) 3rd Party
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed10.3(2)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed10.4(1) 3rd Party
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed10.4(1)SR2 3rd Party
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed11-0-1MSR1-1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed11.0(0.7) MPP
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed11.0(1)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed11.0(2)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed11.0(2)SR1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed11.0(2)SR2
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed11.0(3)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed11.0(3)SR1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed11.0(3)SR2
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed11.0(3)SR3
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed11.0(3)SR4
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed11.0(3)SR5
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed11.0(3)SR6
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed11.0(4)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed11.0(4)SR1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed11.0(4)SR2
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed11.0(4)SR3
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed11.0(5)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed11.0(5)SR1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed11.0(5)SR2
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed11.0(5)SR3
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed11.0(6)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed11.0(6)SR1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed11.0(6)SR2
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed11.0(6)SR4
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed11.0(6)SR5
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed11.0(6)SR6
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed11.0(6)SR7
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed11.5(1)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed11.5(1)SR1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed11.7(1)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed12.0(1)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed12.0(1)SR1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed12.0(1)SR2
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed12.0(1)SR3
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed12.1(1)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed12.1(1)SR1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed12.5(1)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed12.5(1)SR1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed12.5(1)SR2
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed12.5(1)SR3
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed12.6(1)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed12.6(1)SR1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed12.7(1)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed12.7(1)SR1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed12.8(1)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed12.8(1)SR1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed12.8(1)SR2
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed14.0(1)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed14.0(1)SR1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed14.0(1)SR2
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed14.0(1)SR3
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed14.1(1)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed14.1(1)SR1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed14.1(1)SR2
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed14.1(1)SR3
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed14.2(1)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed14.2(1)SR1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed14.2(1)SR2
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed14.2(1)SR3
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed14.2(1)SR4
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed14.3(1)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed14.3(1)SR1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed14.3(1)SR2
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed14.3(1)SR3
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed14.4(1)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed14.4(1)SR1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed14.4(1)SR2
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed2.0(1)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed2.1(1)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed2.2(1)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed2.3(1)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed2.3(1)SR1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed3.0(1)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed3.1(1)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed3.1(1)SR1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed3.2(1)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed3.3(1)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed3.4(1)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed3.5(1)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed3.5(1)SR1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed3.6(1)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed4.0(1)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed4.1(1)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed4.1(1)SR1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed9.3(3)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed9.3(4) 3rd Party
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed9.3(4)SR1 3rd Party
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed9.3(4)SR2 3rd Party
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed9.3(4)SR3 3rd Party
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan