PT-2013-4405 · Cisco · Cisco Unified Communications Manager Im/Presence Service+1

Publicado 2013-08-22 · Atualizado 2013-08-29 · CVE-2013-3453

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager IM and Presence Service versions prior to 8.6(5)SU1 Cisco Unified Communications Manager IM and Presence Service versions 9.x prior to 9.1(2) Cisco Unified Presence (affected versions not specified)

Description The issue allows remote attackers to cause a denial of service by consuming memory and CPU resources. This can be achieved by making many TCP connections to certain ports. The estimated number of potentially affected devices worldwide is not available. Details about real-world incidents where this issue was exploited are not provided.

Recommendations For Cisco Unified Communications Manager IM and Presence Service versions prior to 8.6(5)SU1, update to version 8.6(5)SU1 or later. For Cisco Unified Communications Manager IM and Presence Service versions 9.x prior to 9.1(2), update to version 9.1(2) or later. For Cisco Unified Presence, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2013-3453

Produtos afetados

Cisco Unified Communications Manager Im/Presence Service

Cisco Unified Presence

Referências · 2

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130821-cup · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2013-3453 · Nota de Segurança