CVE-2024-20375

Опубликовано: 21 авг. 2024

Источник: nvd

CVSS3: 8.6

CVSS3: 7.5

EPSS Низкий

Описание

This vulnerability is due to improper parsing of SIP messages. An attacker could exploit this vulnerability by sending a crafted SIP message to an affected Cisco Unified CM or Cisco Unified CM SME device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition that interrupts the communications of reliant voice and video devices.

Ссылки

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-dos-kkHq43We
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cisco:unified_communications_manager:12.0\(1\)su1:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:12.0\(1\)su2:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:12.0\(1\)su3:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:12.0\(1\)su4:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:12.0\(1\)su5:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:12.5\(1\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:12.5\(1\)su1:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:12.5\(1\)su2:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:12.5\(1\)su3:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:12.5\(1\)su4:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:12.5\(1\)su5:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:12.5\(1\)su6:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:12.5\(1\)su7:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:12.5\(1\)su7a:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:12.5\(1\)su8:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:12.5\(1\)su8a:*:*:*:*:*:*:*

EPSS

Процентиль: 76%

0.00964

Низкий

8.6 High

CVSS3

7.5 High

CVSS3

Дефекты

CWE-787

Связанные уязвимости

GHSA-2v3w-9hfq-fx33

CVSS3: 8.6

github

больше 1 года назад

A vulnerability in the SIP call processing function of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper parsing of SIP messages. An attacker could exploit this vulnerability by sending a crafted SIP message to an affected Cisco Unified CM or Cisco Unified CM SME device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition that interrupts the communications of reliant voice and video devices.

BDU:2024-06406

CVSS3: 8.6

fstec

больше 1 года назад

Уязвимость функционала обработки SIP-вызовов системы обработки вызовов Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 76%

0.00964

Низкий

8.6 High

CVSS3

7.5 High

CVSS3

Дефекты

CWE-787