CVE-2005-4794: Cisco IP Phones 7902/7905/7912, ATA 186/188, Unity Express, ACNS, and Subscriber Edge Services Manager (SES...

Security readout for executives and security teams

This old Cisco issue can make certain Cisco voice and network services crash or become unstable when they process a malformed compressed DNS packet. The business impact is availability: phones, voice gateways, caching, or subscriber services could be disrupted if affected devices are still deployed. Exposure is most likely in environments still running the named legacy Cisco voice, content, or subscriber management products. Internet exposure is not proven by the bundle; risk depends on whether affected devices process attacker-controlled DNS traffic. Handle as a targeted availability risk for legacy Cisco infrastructure. It is not currently supported as actively exploited in the supplied sources, but remaining affected systems could disrupt voice or network services and should be identified and retired, upgraded, or isolated. Mitigation focus: Review Cisco advisory 20050524 for product-specific fixes or workarounds.; Inventory the named Cisco products and confirm whether any remain deployed.; Prioritize replacement, upgrade, or isolation for affected systems still in service..

Prepared

Jun 29, 2026, 13:09 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.