CVE-2023-20116

Опубликовано: 28 июн. 2023

Источник: nvd

CVSS3: 6.8

CVSS3: 5.7

EPSS Низкий

Описание

This vulnerability is due to insufficient validation of user-supplied input to the web UI of the Self Care Portal. An attacker could exploit this vulnerability by sending crafted HTTP input to an affected device. A successful exploit could allow the attacker to cause a DoS condition on the affected device.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cisco:unified_communications_manager:11.5\(1.10000.6\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:11.5\(1.10000.6\):*:*:*:session_management:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:12.0\(1.10000.10\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:12.0\(1.10000.10\):*:*:*:session_management:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:12.5\(1.10000.22\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:12.5\(1.10000.22\):*:*:*:session_management:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:14.0\(1.10000.20\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:14.0\(1.10000.20\):*:*:*:session_management:*:*:*

EPSS

Процентиль: 55%

0.00326

Низкий

6.8 Medium

CVSS3

5.7 Medium

CVSS3

Дефекты

CWE-835

Связанные уязвимости

GHSA-4mm9-fmg4-q68j

CVSS3: 6.8

github

больше 2 лет назад

A vulnerability in the Administrative XML Web Service (AXL) API of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient validation of user-supplied input to the web UI of the Self Care Portal. An attacker could exploit this vulnerability by sending crafted HTTP input to an affected device. A successful exploit could allow the attacker to cause a DoS condition on the affected device.

BDU:2023-03219

CVSS3: 6.8

fstec

больше 3 лет назад

Уязвимость интерфейса службы Administrative XML Web Service (AXL) систем обработки вызовов Cisco Unified Communications Manager и Cisco Unified Communications Manager Session Management Edition (Unified CM SME), позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 55%

0.00326

Низкий

6.8 Medium

CVSS3

5.7 Medium

CVSS3

Дефекты

CWE-835