4.3
CVE-2009-0057
- EPSS 0.53%
- Published 22.01.2009 18:30:03
- Last modified 09.04.2025 00:30:58
- Source psirt@cisco.com
- Teams watchlist Login
- Open Login
The Certificate Authority Proxy Function (CAPF) service in Cisco Unified Communications Manager 5.x before 5.1(3e) and 6.x before 6.1(3) allows remote attackers to cause a denial of service (voice service outage) by sending malformed input over a TCP session in which the "client terminates prematurely."
Data is provided by the National Vulnerability Database (NVD)
Cisco ≫ Unified Communications Manager Version5.0
Cisco ≫ Unified Communications Manager Version5.0_1
Cisco ≫ Unified Communications Manager Version5.0_2
Cisco ≫ Unified Communications Manager Version5.0_3
Cisco ≫ Unified Communications Manager Version5.0_3a
Cisco ≫ Unified Communications Manager Version5.0_4
Cisco ≫ Unified Communications Manager Version5.0_4a
Cisco ≫ Unified Communications Manager Version5.0_4a_su1
Cisco ≫ Unified Communications Manager Version5.1
Cisco ≫ Unified Communications Manager Version5.1.2
Cisco ≫ Unified Communications Manager Version5.1_1
Cisco ≫ Unified Communications Manager Version5.1_2
Cisco ≫ Unified Communications Manager Version5.1_2a
Cisco ≫ Unified Communications Manager Version5.1_2b
Cisco ≫ Unified Communications Manager Version5.1_3a
Cisco ≫ Unified Communications Manager Version6.0
Cisco ≫ Unified Communications Manager Version6.0_1
Cisco ≫ Unified Communications Manager Version6.0_1a
Cisco ≫ Unified Communications Manager Version6.1
Cisco ≫ Unified Communications Manager Version6.1.0
Cisco ≫ Unified Communications Manager Version6.1_1a
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
Type | Source | Score | Percentile |
---|---|---|---|
EPSS | FIRST.org | 0.53% | 0.645 |
Source | Base Score | Exploit Score | Impact Score | Vector string |
---|---|---|---|---|
nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:N/A:P
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.