CVE-2013-5526: Cisco Unified IP Phone 9951

High severity, CVSS 7.1. EPSS: 1.8% chance of exploitation in the next 30 days.

Cisco 9900 fourth-generation IP phones do not properly perform SDP negotiation, which allows remote attackers to cause a denial of service (device reboot) via crafted SDP packets, aka Bug ID CSCuf06698.

Affected products

  • Cisco Unified IP Phone 9951: any version
  • Cisco Unified IP Phone 9971: any version

Published 2013-10-10. Last modified 2026-06-16.