The packet-storing feature on Cisco 9900 phones with firmware 9.3(2) does not properly support the RTP protocol, which allows remote attackers to cause a denial of service (device hang) by sending malformed RTP packets after a call is answered, aka Bug ID CSCur39976.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Unified_ip_phones_9900_series_firmware | Cisco | 9.3(2) (including) | 9.3(2) (including) |