PT-2013-2903 · Cisco · Cisco Unified Communications Manager
Published
2013-02-27
·
Updated
2013-03-04
·
CVE-2013-1133
CVSS v2.0
7.8
High
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Cisco Unified Communications Manager (CUCM) versions 8.6 through 8.6(2a)su1
Cisco Unified Communications Manager (CUCM) 8.6 BE3k versions 8.6 through 8.6(3) BE3k
Cisco Unified Communications Manager (CUCM) 9.x versions 9.0 through 9.0(0)
Description
The issue allows remote attackers to cause a denial of service, resulting in CPU consumption and outages of the GUI and voice services, by sending malformed packets to unused UDP ports.
Recommendations
For Cisco Unified Communications Manager (CUCM) versions 8.6 through 8.6(2a)su1, update to version 8.6(2a)su2 or later.
For Cisco Unified Communications Manager (CUCM) 8.6 BE3k versions 8.6 through 8.6(3) BE3k, update to version 8.6(4) BE3k or later.
For Cisco Unified Communications Manager (CUCM) 9.x versions 9.0 through 9.0(0), update to version 9.0(1) or later.
Fix
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Cisco Unified Communications Manager