CVE-2017-12260

A vulnerability in the implementation of Session Initiation Protocol (SIP) functionality in Cisco Small Business SPA50x, SPA51x, and SPA52x Series IP Phones could allow an unauthenticated, remote attacker to cause an affected device to become unresponsive, resulting in a denial of service (DoS) condition. The vulnerability is due to the improper handling of SIP request messages by an affected device. An attacker could exploit this vulnerability by using formatted specifiers in a SIP payload that is sent to an affected device. A successful exploit could allow the attacker to cause the affected device to become unresponsive, resulting in a DoS condition that persists until the device is restarted manually. This vulnerability affects Cisco Small Business SPA50x, SPA51x, and SPA52x Series IP Phones that are running firmware release 7.6.2SR1 or earlier. Cisco Bug IDs: CSCvc63986.

• CWE-119
• CWE-119

• http://www.securityfocus.com/bid/101495Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039616Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171018-sip1Vendor Advisory
• http://www.securityfocus.com/bid/101495Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039616Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171018-sip1Vendor Advisory

Published

Oct 19, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-12255A vulnerability in the CLI of Cisco UCS Central Software cou…
• CVE-2017-12256A vulnerability in the Akamai Connect feature of Cisco Wide …
• CVE-2017-12257A vulnerability in the web framework of Cisco WebEx Meetings…
• CVE-2017-12258A vulnerability in the web-based UI of Cisco Unified Communi…
• CVE-2017-12259A vulnerability in the implementation of Session Initiation …
• CVE-2017-1226IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5…
• CVE-2017-12261A vulnerability in the restricted shell of the Cisco Identit…
• CVE-2017-12262A vulnerability within the firewall configuration of the Cis…
• CVE-2017-12263A vulnerability in the web interface of Cisco License Manage…
• CVE-2017-12264A vulnerability in the Web Admin Interface of Cisco Meeting …
• CVE-2017-12265A vulnerability in the web-based management interface of Cis…
• CVE-2017-12266A vulnerability in the routine that loads DLL files in Cisco…