Vulnerability in Cisco Ip Communicator
CVE-2012-0361
The sccp-protocol component in Cisco IP Communicator (CIPC) 7.0 through 8.6 does not limit the rate of SCCP messages to Cisco Unified Communications Manager (CUCM), which allows remote attackers to cause a denial of service via vectors that trigger (1) on hook and (2) off hook messages, as demonstrated by a Plantronics headset, aka Bug ID CSCti40315.
EPSS: 0.012 (66.6th percentile) — read the EPSS interpretation.
Affected products
- Cisco Ip_communicator — versions 7.0(5), 7.0(4), 7.0(1)
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CONFIRM)
- psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)