CVE-2013-3461

Опубликовано: 25 авг. 2013

Источник: nvd

CVSS2: 7.1

EPSS Низкий

Описание

Cisco Unified Communications Manager (Unified CM) 8.5(x) and 8.6(x) before 8.6(2a)su3 and 9.x before 9.1(1) does not properly restrict the rate of SIP packets, which allows remote attackers to cause a denial of service (memory and CPU consumption, and service disruption) via a flood of UDP packets to port 5060, aka Bug ID CSCub35869.

Ссылки

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130821-cucm
Vendor Advisory
http://www.securitytracker.com/id/1028938
Third Party Advisory
VDB Entry
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130821-cucm
Vendor Advisory
http://www.securitytracker.com/id/1028938
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:cisco:unified_communications_manager:9.0\(1\):*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:cisco:unified_communications_manager:8.5:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:8.5\(1\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:8.5\(1\)su1:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:8.5\(1\)su2:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:8.5\(1\)su3:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:8.5\(1\)su4:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:8.5\(1\)su5:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:a:cisco:unified_communications_manager:8.6:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:8.6\(1\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:8.6\(1a\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:8.6\(2\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:8.6\(2a\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:8.6\(2a\)su1:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:8.6\(2a\)su2:*:*:*:*:*:*:*

EPSS

Процентиль: 66%

0.00511

Низкий

7.1 High

CVSS2

Дефекты

CWE-399

Связанные уязвимости

GHSA-r7hf-97hq-qr83

github

больше 3 лет назад