Vulnerability in Cisco iOS
CVE-2010-0585
Cisco IOS 12.1 through 12.4, when Cisco Unified Communications Manager Express (CME) or Cisco Unified Survivable Remote Site Telephony (SRST) is enabled, allows remote attackers to cause a denial of service (device reload) via a malformed Skinny Client Control Protocol (SCCP) message, aka Bug ID CSCsz48614, the "SCCP Packet Processing Denial of Service Vulnerability."
EPSS: 0.016 (73.5th percentile) — read the EPSS interpretation.
Affected products
- Cisco Ios — versions 12.2xw, 12.2yu, 12.3xg
- N/a — versions n/a
References
- psirt@cisco.com (x_refsource_SECUNIA, third-party-advisory)
- psirt@cisco.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Patch, Vendor Advisory)