PT-2010-3241 · Cisco · Cisco Unified Contact Center Express

Publicado 2010-06-10 · Atualizado 2017-08-17 · CVE-2010-1570

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Unified Contact Center Express (UCCX) versions 5.0 through 5.0(2)SR2 Cisco Unified Contact Center Express (UCCX) versions 6.0 through 6.0(1)SR0 Cisco Unified Contact Center Express (UCCX) versions 7.0 through 7.0(1)SR3 and 7.0(2) before 7.0(2) patch

Description The issue allows remote attackers to cause a denial of service, resulting in the failure of the CTI server and Node Manager, via a malformed CTI message.

Recommendations For Cisco Unified Contact Center Express (UCCX) versions 5.0 through 5.0(2)SR2, update to version 5.0(2)SR3 or later. For Cisco Unified Contact Center Express (UCCX) versions 6.0 through 6.0(1)SR0, update to version 6.0(1)SR1 or later. For Cisco Unified Contact Center Express (UCCX) versions 7.0 through 7.0(1)SR3, update to 7.0(1)SR4 or later. For Cisco Unified Contact Center Express (UCCX) version 7.0(2) before 7.0(2) patch, apply the patch for version 7.0(2).

Correção

Identificadores relacionados

CVE-2010-1570

Produtos afetados

Cisco Unified Contact Center Express

Referências · 5

• http://cisco.com/en/US/products/products_security_advisory09186a0080b2f110.shtml · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2010-1570 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/59276 · Nota
• http://securitytracker.com/id?1024081 · Nota
• http://securityfocus.com/bid/40684 · Nota