CVE-2007-0648: Cisco IOS after 12.3(14)T, 12.3(8)YC1, 12.3(8)YG, and 12.4, with voice support and without Session Initiate...

Security readout for executives and security teams

This is a denial-of-service issue in certain Cisco IOS versions with voice support. A remote attacker could send a crafted UDP packet to port 5060 and crash the device, even when SIP is not configured. Business impact is availability: affected routers or gateways may reload and interrupt network or voice services. Exposure is most likely in legacy Cisco IOS routers or voice-capable network devices where UDP/5060 is reachable from untrusted networks. Organizations without older IOS assets or without voice support are less likely to be affected, but should verify inventory rather than assume. Treat this as high priority for legacy, externally reachable Cisco IOS voice-capable infrastructure. The main risk is outage of routing or voice services. If no such devices are exposed, priority drops after documented validation. Mitigation focus: Review Cisco advisory guidance for affected and fixed IOS releases.; Restrict UDP/5060 exposure to trusted networks where operationally possible.; Prioritize replacement or upgrade of unsupported legacy Cisco IOS devices..

Prepared

Jun 29, 2026, 07:49 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.