Vulnerability in Cisco Unified Communications Manager
CVE-2009-2052
Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x, 5.x before 5.1(3g), 6.x before 6.1(4), 7.0 before 7.0(2), and 7.1 before 7.1(2); and Cisco Unified Presence 1.x, 6.x before 6.0(6), and 7.x before 7.0(4); allows remote attackers to cause a denial of service (TCP services outage) via a large number of TCP connections, related to "tracking of network connections," aka Bug IDs CSCsq22534 and CSCsw52371.
EPSS: 0.040 (89.4th percentile) — read the EPSS interpretation.
Affected products
- Cisco Unified_communications_manager
- N/a — versions n/a
References
- psirt@cisco.com (Third Party Advisory, vdb-entry, x_refsource_VUPEN)
- psirt@cisco.com (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- psirt@cisco.com (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
- psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
- psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
- psirt@cisco.com (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Patch, Vendor Advisory)
- psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
- psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)