Improper input validation in Cisco Unified Communications Manager
CVE-2008-1748
Cisco Unified Communications Manager 4.1 before 4.1(3)SR7, 4.2 before 4.2(3)SR4, 4.3 before 4.3(2), 5.x before 5.1(3), and 6.x before 6.1(1) does not properly validate SIP URLs, which allows remote attackers to cause a denial of service (service interruption) via a SIP INVITE message, aka Bug ID CSCsl22355.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.025 (82.7th percentile) — read the EPSS interpretation.
Affected products
- Cisco Unified_communications_manager
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Patch, Vendor Advisory)
- psirt@cisco.com (Permissions Required, vdb-entry, x_refsource_VUPEN)
- psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
- psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_XF)
- psirt@cisco.com (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
- psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)