PT-2010-3241 · Cisco · Cisco Unified Contact Center Express

Published 2010-06-10 · Updated 2017-08-17 · CVE-2010-1570

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Unified Contact Center Express (UCCX) versions 5.0 through 5.0(2)SR2 Cisco Unified Contact Center Express (UCCX) versions 6.0 through 6.0(1)SR0 Cisco Unified Contact Center Express (UCCX) versions 7.0 through 7.0(1)SR3 and 7.0(2) before 7.0(2) patch

Description The issue allows remote attackers to cause a denial of service, resulting in the failure of the CTI server and Node Manager, via a malformed CTI message.

Recommendations For Cisco Unified Contact Center Express (UCCX) versions 5.0 through 5.0(2)SR2, update to version 5.0(2)SR3 or later. For Cisco Unified Contact Center Express (UCCX) versions 6.0 through 6.0(1)SR0, update to version 6.0(1)SR1 or later. For Cisco Unified Contact Center Express (UCCX) versions 7.0 through 7.0(1)SR3, update to 7.0(1)SR4 or later. For Cisco Unified Contact Center Express (UCCX) version 7.0(2) before 7.0(2) patch, apply the patch for version 7.0(2).

Fix

Related Identifiers

CVE-2010-1570

Affected Products

Cisco Unified Contact Center Express

References · 5

• http://cisco.com/en/US/products/products_security_advisory09186a0080b2f110.shtml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-1570 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/59276 · Note
• http://securitytracker.com/id?1024081 · Note
• http://securityfocus.com/bid/40684 · Note