A vulnerability has been reported in Cisco 7940 and 7960 IP Phones, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to an error in the IP Stack. This can be exploited to cause the IP Phone to reload by sending a SYN flood to an arbitrary port.

Solution
Update to firmware revision 7.1(1) or later, which have the capability to perform load control using TCP throttling. This prevents a device from reloading.

Provided and/or discovered by
The vendor credits Knud Erik Højgaard.

Changelog
Further details available in Customer Area

Original Advisory
http://www.cisco.com/warp/public/707/cisco-response-20060113-ip-phones.shtml

Deep Links
Links available in Customer Area