CVE-2015-4226
The packet-storing feature on Cisco 9900 phones with firmware 9.3(2) does not properly support...
CVE-2015-4226 is a high vulnerability (CVSS 7.1) in Cisco Unified Ip Phones 9900 Series Firmware, published June 30, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.75%, the 86th percentile. No source names a fixed version.
- Severity
- 7.1 HighCVSS 2.0, NVD
- Exploit chance
- 2.75%EPSS, 86th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
The packet-storing feature on Cisco 9900 phones with firmware 9.3(2) does not properly support the RTP protocol, which allows remote attackers to cause a denial of service (device hang) by sending malformed RTP packets after a call is answered, aka Bug ID CSCur39976.
Exploit likelihood
Affected products
What each source reports
NVD Score used
The packet-storing feature on Cisco 9900 phones with firmware 9.3(2) does not properly support the RTP protocol, which allows remote attackers to cause a denial of service (device hang) by sending malformed RTP packets after a call is answered, aka Bug ID CSCur39976.
- Record
CVE-2015-4226- CVSS 2.0
- 7.1 High
AV:N/AC:M/Au:N/C:N/I:N/A:C - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE ListNo score
The packet-storing feature on Cisco 9900 phones with firmware 9.3(2) does not properly support the RTP protocol, which allows remote attackers to cause a denial of service (device hang) by sending malformed RTP packets after a call is answered, aka Bug ID CSCur39976.
- Record
CVE-2015-4226- Updated
- 2026-11-02
EUVDEUVD-2015-4249No score
The packet-storing feature on Cisco 9900 phones with firmware 9.3(2) does not properly support the RTP protocol, which allows remote attackers to cause a denial of service (device hang) by sending malformed RTP packets after a call is answered, aka Bug ID CSCur39976.
- Record
EUVD-2015-4249- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-29v6-j9p2-6qxcNo score
The packet-storing feature on Cisco 9900 phones with firmware 9.3(2) does not properly support...
The packet-storing feature on Cisco 9900 phones with firmware 9.3(2) does not properly support the RTP protocol, which allows remote attackers to cause a denial of service (device hang) by sending malformed RTP packets after a call is answered, aka Bug ID CSCur39976.
- Record
GHSA-29v6-j9p2-6qxc- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.