CVE:CVE-2017-12260
CNNVD:CNNVD-201710-887
Cisco Small Business SPA50x、SPA51x和SPA52x Series IP Phones都是美国思科（Cisco）公司的IP电话产品。
Cisco Small Business SPA50x、SPA51x和SPA52x Series IP Phones中的Session Initiation Protocol (SIP)功能的实现存在拒绝服务漏洞，该漏洞源于程序没有正确的处理SIP请求消息。远程攻击者可通过向受影响设备上发送带有格式化字符串的SIP载荷利用该漏洞造成拒绝服务（无法响应）。
solution:Upgrade cisco spa_501g_firmware to a higher version than *:sr1,and avoid the version *:sr1; Upgrade cisco spa_502g_firmware to a higher version than *:sr1,and avoid the version *:sr1; Upgrade cisco spa_504g_firmware to a higher version than *:sr1,and avoid the version *:sr1; Upgrade cisco spa_508g_firmware to a higher version than *:sr1,and avoid the version *:sr1; Upgrade cisco spa_509g_firmware to a higher version than *:sr1,and avoid the version *:sr1; Upgrade cisco spa_512g_firmware to a higher version than *:sr1,and avoid the version *:sr1; Upgrade cisco spa_514g_firmware to a higher version than *:sr1,and avoid the version *:sr1; Upgrade cisco spa_525g_firmware to a higher version than *:sr1,and avoid the version *:sr1