CVE-2010-2837

Опубликовано: 26 авг. 2010

Источник: nvd

CVSS2: 7.8

EPSS Низкий

Описание

The SIPStationInit implementation in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.1SU before 6.1(5)SU1, 7.0SU before 7.0(2a)SU3, 7.1SU before 7.1(3b)SU2, 7.1 before 7.1(5), and 8.0 before 8.0(1) allows remote attackers to cause a denial of service (process failure) via a malformed SIP message, aka Bug ID CSCtd17310.

Ссылки

http://www.cisco.com/en/US/products/products_security_advisory09186a0080b43908.shtml
Patch
Vendor Advisory
http://www.vupen.com/english/advisories/2010/2187
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b43908.shtml
Patch
Vendor Advisory
http://www.vupen.com/english/advisories/2010/2187

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*

Версия до 6.1\(5\) (включая)

cpe:2.3:a:cisco:unified_communications_manager:6.1\(1\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:6.1\(1a\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:6.1\(1b\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:6.1\(2\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:6.1\(2\)su1:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:6.1\(2\)su1a:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:6.1\(3\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:6.1\(3a\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:6.1\(3b\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:6.1\(3b\)su1:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:6.1\(4\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:6.1\(4\)su1:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:6.1\(4a\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:6.1\(4a\)su2:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*

Версия до 7.0\(2a\)su2 (включая)

cpe:2.3:a:cisco:unified_communications_manager:7.0\(1\)su1:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:7.0\(1\)su1a:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:7.0\(2\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:7.0\(2a\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:7.0\(2a\)su1:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*

Версия до 7.1\(5\)su1a (включая)

cpe:2.3:a:cisco:unified_communications_manager:7.1\(2a\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:7.1\(2a\)su1:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:7.1\(2b\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:7.1\(2b\)su1:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:7.1\(3\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:7.1\(3a\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:7.1\(3a\)su1:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:7.1\(3a\)su1a:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:7.1\(3b\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:7.1\(3b\)su1:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:7.1\(3b\)su2:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:7.1\(5\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:7.1\(5\)su1:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:7.1\(5a\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:7.1\(5b\):*:*:*:*:*:*:*

Конфигурация 4

Одно из

cpe:2.3:a:cisco:unified_communications_manager:8.0\(2c\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:8.0\(2c\)su1:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:8.0\(3\):*:*:*:*:*:*:*

EPSS

Процентиль: 62%

0.00427

Низкий

7.8 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-h4xg-337c-jq3v

github

больше 3 лет назад

EPSS

Процентиль: 62%

0.00427

Низкий

7.8 High

CVSS2

Дефекты

NVD-CWE-Other