Unscored severity · published Sep 28, 2009
CVE-2009-2864
Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 5.x before 5.1(3g), 6.x before 6.1(4), 7.0.x before 7.0(2a)su1, and 7.1.x before 7.1(2) allows remote…
–
CVSS
2.9%
EPSS
No
On KEV
Description
Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 5.x before 5.1(3g), 6.x before 6.1(4), 7.0.x before 7.0(2a)su1, and 7.1.x before 7.1(2) allows remote attackers to cause a denial of service (service restart) via malformed SIP messages, aka Bug ID CSCsz95423.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.9% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
UC
Unified Callmanager · Cisco
5.0(1); 5.0(2); 5.0(2a); 5.0(3); 5.0(3a); 5.0(4); +21 more · source: NVD
UC
Unified Communications Manager · Cisco
5.1(1b); 5.1(1c); 5.1(2); 5.1(2a); 5.1(3); 5.1(3a); +13 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-2864
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-2864
osvdb.org
http://osvdb.org/58344
Vendor Advisory
http://secunia.com/advisories/36836
Patch
http://tools.cisco.com/security/center/viewAlert.x?alertId=18883
Vendor Advisory
http://www.cisco.com/en/US/products/products_security_advisory09186a0080af8118.shtml
www.securityfocus.com
http://www.securityfocus.com/bid/36496
www.securitytracker.com
http://www.securitytracker.com/id?1022931
More from Unified Callmanager
–
CVE-2015-0680
Cisco Unified Call Manager (CM) 9.1(2.1000.28) does not properly restrict resource requests, which allows remote authenticated users to read arbitrary files via unspecified…
–
CVE-2008-3801
Unspecified vulnerability in the Session Initiation Protocol (SIP) implementation in Cisco IOS 12.2 through 12.4 and Unified Communications Manager 4.1 through 6.1, when VoIP is…
–
CVE-2008-3800
Unspecified vulnerability in the Session Initiation Protocol (SIP) implementation in Cisco IOS 12.2 through 12.4 and Unified Communications Manager 4.1 through 6.1, when VoIP is…
–
CVE-2008-1744
The Certificate Authority Proxy Function (CAPF) service in Cisco Unified Communications Manager (CUCM) 4.1 before 4.1(3)SR7, 4.2 before 4.2(3)SR4, and 4.3 before 4.3(2) allows…
–
CVE-2008-0026
SQL injection vulnerability in Cisco Unified CallManager/Communications Manager (CUCM) 5.0/5.1 before 5.1(3a) and 6.0/6.1 before 6.1(1a) allows remote authenticated users to…