Unscored severity · published Jun 10, 2010
CVE-2010-1570
The computer telephony integration (CTI) server component in Cisco Unified Contact Center Express (UCCX) 7.0 before 7.0(1)SR4 and 7.0(2), 6.0 before 6.0(1)SR1, and 5.0 before…
–
CVSS
2.5%
EPSS
No
On KEV
Description
The computer telephony integration (CTI) server component in Cisco Unified Contact Center Express (UCCX) 7.0 before 7.0(1)SR4 and 7.0(2), 6.0 before 6.0(1)SR1, and 5.0 before 5.0(2)SR3 allows remote attackers to cause a denial of service (CTI server and Node Manager failure) via a malformed CTI message.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.5% · higher than 85% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CR
Customer Response Solution · Cisco
5.0; 6.0; 7.0 · source: NVD
UC
Unified Contact Center Express · Cisco
5.0; 6.0; 7.0 · source: NVD
UI
Unified IP Interactive Voice Response · Cisco
5.0; 6.0; 7.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-1570
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-1570
Patch
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b2f110.shtml
www.securityfocus.com
http://www.securityfocus.com/bid/40684
www.securitytracker.com
http://www.securitytracker.com/id?1024081
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/59276
More from Customer Response Solution
–
CVE-2010-1571
Directory traversal vulnerability in the bootstrap service in Cisco Unified Contact Center Express (UCCX) 7.0 before 7.0(1)SR4 and 7.0(2), unspecified 6.0 versions, and 5.0 before…