PT-2024-5693 · Cisco · Cisco Unified Communications Manager+1

Published

2024-08-21

·

Updated

2026-04-21

·

CVE-2024-20375

CVSS v3.1

8.6

High

VectorAV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager (affected versions not specified) Cisco Unified Communications Manager Session Management Edition (affected versions not specified)
Description A vulnerability in the SIP call processing function of Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper parsing of SIP messages. An attacker could exploit this vulnerability by sending a crafted SIP message to an affected Cisco Unified CM or Cisco Unified CM SME device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition that interrupts the communications of reliant voice and video devices.
Recommendations Update your Cisco Unified Communications Manager to mitigate this Denial-of-Service (DoS) vulnerability. As a temporary workaround, consider restricting access to the SIP call processing function until a patch is available. Avoid using the vulnerable SIP call processing function in the affected Cisco Unified CM or Cisco Unified CM SME device until the issue is resolved.

Fix

DoS

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

BDU:2024-06406
CVE-2024-20375

Affected Products

Cisco Unified Communications Manager
Cisco Unified Communications Manager Session Management Edition