Detections
Analytics
Cisco VoIP Phone Multiple Script Malformed Request DoS
high Nessus Plugin ID 11013
Synopsis
The remote IP phone has multiple vulnerabilities.Description
The remote host appears to be a Cisco IP phone. It was possible to reboot this device by requesting :http://<phone-ip>/StreamingStatistics?120000
This device likely has other vulnerabilities that Nessus has not checked for.
Solution
Apply the fix referenced in the vendor's advisory.See Also
Plugin Details
Severity: High
ID: 11013
File Name: cisco_voip_dos.nasl
Version: 1.36
Type: remote
Family: CISCO
Published: 6/5/2002
Updated: 4/11/2022
Configuration: Enable paranoid mode, Enable thorough checks
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.2
CVSS v2
Risk Factor: High
Base Score: 8.5
Temporal Score: 6.3
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:C
Vulnerability Information
CPE: cpe:/h:cisco:voip_phone_cp, cpe:/o:cisco:voip_phone_cp
Required KB Items: Settings/ParanoidReport
Exploit Ease: No known exploits are available
Patch Publication Date: 5/22/2002
Vulnerability Publication Date: 5/23/2002
Reference Information
CVE: CVE-2002-0882