Vulnerability in Cisco Unified Communications Manager

CVE-2011-1605

Unspecified vulnerability in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)su2, 7.x before 7.1(5b)su2, 8.0 before 8.0(3), and 8.5 before 8.5(1) allows remote attackers to cause a denial of service (process failure) via a malformed SIP message, aka Bug ID CSCth39586.

EPSS: 0.029 (85.7th percentile) — read the EPSS interpretation.

Affected products

Cisco Unified_communications_manager — versions 6.0, 6.1\(1\), 6.1\(1a\)
N/a — versions n/a

References

psirt@cisco.com (x_refsource_SECUNIA, third-party-advisory)
psirt@cisco.com (mailing-list, x_refsource_FULLDISC)
psirt@cisco.com (vdb-entry, x_refsource_XF)
psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)
psirt@cisco.com (vdb-entry, x_refsource_VUPEN)
psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
psirt@cisco.com (vdb-entry, x_refsource_BID)