Vulnerability in Cisco Unified Communications Manager

CVE-2010-0590

The CMSIPUtility component in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 7.x before 7.1(3a)su1 and 8.x before 8.0(1) allows remote attackers to cause a denial of service (process failure) via a malformed SIP Register message, aka Bug ID CSCtc37188.

EPSS: 0.025 (83.2th percentile) — read the EPSS interpretation.

Affected products

Cisco Unified_communications_manager — versions 7.0\(1\), 7.0, 8.0
N/a — versions n/a

References

psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)
psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Patch, Vendor Advisory)
psirt@cisco.com (vdb-entry, x_refsource_BID)