What’s Vulnerable › Vulnerabilities

CVE-2015-6391

• Severity: high (CVSS 7.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2015-12-05 · updated 2026-06-17
• Weakness: CWE-399

Description

Cisco Unified SIP 3905 phones allow remote attackers to cause a denial of service (resource consumption and functionality loss) via a large amount of network traffic, aka Bug ID CSCuh51331.

Affected products

• Cisco Unified Sip Phone 3900 Firmware: 8.1(1b), 8.1(2), 8.1(2)sr1, 8.1(3), 8.1(4), 9.2(1) (+1)

References

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151202-sip
• http://www.securitytracker.com/id/1034285
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151202-sip
• http://www.securitytracker.com/id/1034285

Get alerted when CVE-2015-6391 or the next vulnerability affects your stack