Vulnerability in Cisco Ios

CVE-2009-5040

CallManager Express (CME) on Cisco IOS before 15.0(1)XA allows remote authenticated users to cause a denial of service (device crash) by using an extension mobility (EM) phone to interact with the menu for SNR number changes, aka Bug ID CSCta63555.

EPSS: 0.020 (78.8th percentile) — read the EPSS interpretation.

Affected products

  • Cisco Ios — versions 4.1, 4.1.1, 4.1.2
  • N/a — versions n/a

Weakness classification (CWE)

References