Vulnerability in Cisco iOS

CVE-2010-0586

Cisco IOS 12.1 through 12.4, when Cisco Unified Communications Manager Express (CME) or Cisco Unified Survivable Remote Site Telephony (SRST) is enabled, allows remote attackers to cause a denial of service (device reload) via a malformed Skinny Client Control Protocol (SCCP) message, aka Bug ID CSCsz49741, the "SCCP Request Handling Denial of Service Vulnerability."

EPSS: 0.025 (83.4th percentile) — read the EPSS interpretation.

Affected products

  • Cisco Ios — versions 12.2xw, 12.2yu, 12.3xg
  • N/a — versions n/a

References