BugZero | Cisco BugID CSCur26932 - 9951 video calls to CME over SIP trunk result in o...

Loading...

Operational Defect Database

A free repository of operational (non-security) bugs centralized through custom integrations with leading IT vendors.

Product

BugZero Prevent
BugZero Plan
Operational Risk Scoring
Vendor Integrations

Company

Plans
Value Guide
About
Contact us
Legal

Resources

Blog
ServiceNow App
Trust Center
Risk Management
NIST
DORA

Operational Defect Database

A free repository of operational (non-security) bugs centralized through custom integrations with leading IT vendors.

Product

BugZero Prevent
BugZero Plan
Operational Risk Scoring
Vendor Integrations

Company

Plans
Value Guide
About
Contact us
Legal

Resources

Blog
ServiceNow App
Trust Center
Risk Management
NIST
DORA

©2025 BugZero. All Rights Reserved.

Privacy Policy Terms of Service

BugZero | Cisco BugID CSCur26932 - 9951 video calls to CME over SIP trunk result in o...

ODD
Cisco
CSCur26932

Cisco - Defect ID: CSCur26932

9951 video calls to CME over SIP trunk result in one way video

ODD
Cisco
CSCur26932

Cisco - Defect ID: CSCur26932

9951 video calls to CME over SIP trunk result in one way video

Last updated on February 24th, 2026

BugZero Risk Score
6.1 Medium

Overall: 6.1

Severity: 6.4

Lifecycle: 9.1

Popularity: 4.6

What is the BugZero Risk Score?

Cisco Integration

Learn more about where this data comes from

Cisco Integration

BugZero Plan

Streamline upgrades with automated vendor bug scrubs

BugZero Plan

BugZero Prevent

Wish you caught this bug sooner? Get proactive today.

BugZero Prevent

Bug Details

Description

Symptom

Issue with one-way or no way video on CME video phone 89XX 9951 phone --> SIP--> CUCM-->SIP-->CUBE-->SIP-->CUCME-->SCCP--> 8945 phone Here below the releases and firmwares used on each equipment. SITE A CUCM 8.6.2.22900-9 phone 9951 firmware sip9951.9-3-1-33 phone 8945 firmware SCCP8941_8945.9-3-2-11 CUBE c2900-universalk9-mz.SPA.152-3.T3.bin SITEB CUCME 9.1 IOS: c2900-universalk9-mz.SPA.153-1.T1.bin Phone 8945 firmware SCCP894x.9-2-3-5 When the 9951 phone on site A calls the 8945 phone on site B, the video won't be displayed on the 8945 phone on site B. But the 9951 phone will display the video. Now if if we change the scenario like this: 8945 phone --> SCCP--> CUCM-->SIP-->CUBE-->SIP-->CUCME-->SCCP--> 8945 phone or 9951 phone --> SIP--> CUCM-->SIP-->CUBE-->SIP-->CUCM (not CUCME)-->SCCP--> 8945 phone The video will be displayed on both phones.

Conditions

There are 2 scenarios tested out. Scenario 1 : When 9951 phone on CUCM calls 8941 on CME, One way video happens. call flow : 9951 ---SIP --- CUCM ---SIP --- CME ----SCCP ---8941. Result : One way video. Scenario 2: When 8941 phone on CME calls 9951 on CUCM, no way video. Call flow: 8941 -SCCP --- CME ----SIP ---- CUCM ---SIP ---9951 . Result: No way Video.

Workaround

Either 1. Enable EO on CUCM 2. hardcode payload-type on dial-peer on CME (towards CUCM) to 97 rtp payload-type cisco-codec-fax-ack 111 rtp payload-type cisco-codec-video-h264 97

Further Problem Description

Root cause : When the call is trying to be established, the CME is telling the phone to use a wrong payload. On SIP side: towards CUCM we negotiate 119 as payload type (on CME side), but the CUCM has negotiated to payload type 97 on CUCM side. Now on SCCP phone negotiation, CME tell the phone to use Start media transmission using port 97 Start media transmission using port 97 (video) Open receive channel for payload type 97 But 9971 on CUCM is sending payload type = 119 (Video), but CME phone is looking for payload type=97 video from 9971 and hence the problem.

Change history

2026-02-24 Removed: 15.3(2.6)T

2026-02-24 Removed: 15.3(2.6)T

2021-07-13 Added: 15.3(2.6)T

Relevant Products

Click on a version to see all relevant bugs

Affected versions:No known affected versions

Fixed versions: 16.1.0, 16.1.1, 16.1.2, 16.1.3, 16.10.1, 16.10.1a, 16.10.1b, 16.10.1c, 16.10.1d, 16.10.1e, 16.10.1i, 16.10.1s, 16.11.1, 16.11.1a, 16.2.1, 16.2.2, 16.3.1, 16.3.1a, 16.3.2, 16.3.3, 16.3.3a, 16.3.4, 16.3.5, 16.3.5a, 16.3.5b, 16.3.5c, 16.3.6, 16.3.7, 16.3.8, 16.4.1, 16.4.2, 16.4.3, 16.5.1, 16.5.1a, 16.5.1b, 16.5.2, 16.5.3, 16.6.1, 16.6.1a, 16.6.2, 16.6.2s, 16.6.3, 16.6.4, 16.6.4a, 16.6.4s, 16.6.5, 16.6.5a, 16.6.5b, 16.7.1, 16.7.1a, 16.7.1b, 16.7.2, 16.7.3, 16.8.1, 16.8.1a, 16.8.1b, 16.8.1c, 16.8.1d, 16.8.1e, 16.8.1s, 16.8.2, 16.8.3, 16.9.1, 16.9.1a, 16.9.1b, 16.9.1c, 16.9.1d, 16.9.1s, 16.9.2, 16.9.2a, 16.9.2s, 16.9.3, 16.9.3h, 3.15.4S_V155_2_S4_FC1, 3.16.2S_V155_3_S2_FC2, 3.16.2aS_V155_3_S2A_FC1, 3.16.2bS_V155_3_S2B_FC1, 3.16.3aS_V155_3_S3A_FC1, 3.16.4S_V155_3_S4_FC1, 3.16.4aS_V155_3_S4A_FC1, 3.16.4bS_V155_3_S4B_FC1, 3.16.4cS_V155_3_S4C_FC1, 3.16.4dS_V155_3_S4D_FC2, 3.16.4eS_V155_3_S4E_FC1, 3.16.4gS_V155_3_S4G_FC1, 3.16.5S_V155_3_S5_FC2, 3.16.5aS_V155_3_S5A_FC3, 3.16.5bS_V155_3_S5B_FC1, 3.16.6S, 3.16.6bS_V155_3_S6B_FC4, 3.16.7S_V155_3_S7_FC1, 3.16.7aS_V155_3_S7A_FC1, 3.16.7bS_V155_3_S7B_FC1, 3.16.8S_V155_3_S8_FC2, 3.16.9S_V155_3_S9_FC3, 3.17.1S_V156_1_S1_FC3, 3.17.1aS_V156_1_S1A_FC1, 3.17.2S_V156_1_S2_FC1, 3.17.3S_V156_1_S3_FC2, 3.17.4S_V156_1_S4_FC2, 3.18.0SP_V156_2_SP_FC2, 3.18.0S_V156_2_SP_FC2, 3.18.0aS_V156_2_S0A_FC1, 3.18.1SP_V156_2_SP1_FC3, 3.18.1S_V156_2_SP1_FC3, 3.18.1aSP_V156_2_SP1A_FC1, 3.18.1bSP_V156_2_SP1B_FC2, 3.18.1cSP_V156_2_SP1C_FC1, 3.18.1gSP_V156_2_SP1G_FC1, 3.18.1hSP_V156_2_SP1H_FC1, 3.18.1iSP_V156_2_SP1I_FC3, 3.18.2SP_V156_2_SP2_FC2, 3.18.2S_V156_2_SP2_FC2, 3.18.2aSP_V156_2_SP2A_FC3, 3.18.3SP_V156_2_SP3_FC4, 3.18.3S_V156_2_SP3_FC4, 3.18.3aSP_V156_2_SP3A_FC1, 3.18.3bSP_V156_2_SP3B_FC2, 3.18.4SP_V156_2_SP4_FC4, 3.18.4S_V156_2_SP4_FC4, 3.18.5SP_V156_2_SP5_FC4, 3.18.6SP_V156_2_SP6_FC4

Relevant Products

Click on a version to see all relevant bugs

Affected versions:No known affected versions

Fixed versions: 16.1.0, 16.1.1, 16.1.2, 16.1.3, 16.10.1, 16.10.1a, 16.10.1b, 16.10.1c, 16.10.1d, 16.10.1e, 16.10.1i, 16.10.1s, 16.11.1, 16.11.1a, 16.2.1, 16.2.2, 16.3.1, 16.3.1a, 16.3.2, 16.3.3, 16.3.3a, 16.3.4, 16.3.5, 16.3.5a, 16.3.5b, 16.3.5c, 16.3.6, 16.3.7, 16.3.8, 16.4.1, 16.4.2, 16.4.3, 16.5.1, 16.5.1a, 16.5.1b, 16.5.2, 16.5.3, 16.6.1, 16.6.1a, 16.6.2, 16.6.2s, 16.6.3, 16.6.4, 16.6.4a, 16.6.4s, 16.6.5, 16.6.5a, 16.6.5b, 16.7.1, 16.7.1a, 16.7.1b, 16.7.2, 16.7.3, 16.8.1, 16.8.1a, 16.8.1b, 16.8.1c, 16.8.1d, 16.8.1e, 16.8.1s, 16.8.2, 16.8.3, 16.9.1, 16.9.1a, 16.9.1b, 16.9.1c, 16.9.1d, 16.9.1s, 16.9.2, 16.9.2a, 16.9.2s, 16.9.3, 16.9.3h, 3.15.4S_V155_2_S4_FC1, 3.16.2S_V155_3_S2_FC2, 3.16.2aS_V155_3_S2A_FC1, 3.16.2bS_V155_3_S2B_FC1, 3.16.3aS_V155_3_S3A_FC1, 3.16.4S_V155_3_S4_FC1, 3.16.4aS_V155_3_S4A_FC1, 3.16.4bS_V155_3_S4B_FC1, 3.16.4cS_V155_3_S4C_FC1, 3.16.4dS_V155_3_S4D_FC2, 3.16.4eS_V155_3_S4E_FC1, 3.16.4gS_V155_3_S4G_FC1, 3.16.5S_V155_3_S5_FC2, 3.16.5aS_V155_3_S5A_FC3, 3.16.5bS_V155_3_S5B_FC1, 3.16.6S, 3.16.6bS_V155_3_S6B_FC4, 3.16.7S_V155_3_S7_FC1, 3.16.7aS_V155_3_S7A_FC1, 3.16.7bS_V155_3_S7B_FC1, 3.16.8S_V155_3_S8_FC2, 3.16.9S_V155_3_S9_FC3, 3.17.1S_V156_1_S1_FC3, 3.17.1aS_V156_1_S1A_FC1, 3.17.2S_V156_1_S2_FC1, 3.17.3S_V156_1_S3_FC2, 3.17.4S_V156_1_S4_FC2, 3.18.0SP_V156_2_SP_FC2, 3.18.0S_V156_2_SP_FC2, 3.18.0aS_V156_2_S0A_FC1, 3.18.1SP_V156_2_SP1_FC3, 3.18.1S_V156_2_SP1_FC3, 3.18.1aSP_V156_2_SP1A_FC1, 3.18.1bSP_V156_2_SP1B_FC2, 3.18.1cSP_V156_2_SP1C_FC1, 3.18.1gSP_V156_2_SP1G_FC1, 3.18.1hSP_V156_2_SP1H_FC1, 3.18.1iSP_V156_2_SP1I_FC3, 3.18.2SP_V156_2_SP2_FC2, 3.18.2S_V156_2_SP2_FC2, 3.18.2aSP_V156_2_SP2A_FC3, 3.18.3SP_V156_2_SP3_FC4, 3.18.3S_V156_2_SP3_FC4, 3.18.3aSP_V156_2_SP3A_FC1, 3.18.3bSP_V156_2_SP3B_FC2, 3.18.4SP_V156_2_SP4_FC4, 3.18.4S_V156_2_SP4_FC4, 3.18.5SP_V156_2_SP5_FC4, 3.18.6SP_V156_2_SP6_FC4

Top Cisco Defects

9.7Defect ID: CSCvx82406
Memory leaks in IOS_PRIV_OPER_DB
9.7Defect ID: CSCwf37271
cnssdaemon.log fills up flash partition 2, preventing AP upgrades
9.7Defect ID: CSCwi93213
9800 WLC marked "AAA Server Down" after switchover when using key 6 password encryption
9.7Defect ID: CSCwt50498
Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
9.7Defect ID: CSCvz07394
2960X Stack may observe hang/freeze of member switches or complete stack.

Ready to prevent the next vendor outage?

Links

Original Vendor Announcement

Cisco Integration

Learn more about where this data comes from

Cisco Integration

BugZero Plan

Streamline upgrades with automated vendor bug scrubs

BugZero Plan

BugZero Prevent

Wish you caught this bug sooner? Get proactive today.

BugZero Prevent