Title: Aastra 9112i SIP Phone SIP Message Denial Of Service Vulnerability
Severity: MODERATE
Description:
The Aastra 9112i IP is a Voice Over IP (VoIP) phone.
The phone is prone to a denial-of-service vulnerability because it fails to handle specially crafted SIP messages, Specifically, if an attacker sends an SIP message with malformed header values, the phone will become unresponsive or ring indefinitely.
An attacker can exploit this issue to crash the affected device, denying service to legitimate users.
This issue affects firmware 1.4.0.1048, boot version: 1.1.0.10.
Affected Products:
- Aastra 9112i SIP Phone
- Aastra 9112i SIP Phone 1.4.0.1048
