CVE-2010-2837

EPSS 0.43%
Veröffentlicht 26.08.2010 21:00:01
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle psirt@cisco.com
CVE-Watchlists
Login
Unerledigt
Login

The SIPStationInit implementation in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.1SU before 6.1(5)SU1, 7.0SU before 7.0(2a)SU3, 7.1SU before 7.1(3b)SU2, 7.1 before 7.1(5), and 8.0 before 8.0(1) allows remote attackers to cause a denial of service (process failure) via a malformed SIP message, aka Bug ID CSCtd17310.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Cisco ≫ Unified Communications Manager Version <= 6.1\(5\)

Cisco ≫ Unified Communications Manager Version <= 7.0\(2a\)su2

Cisco ≫ Unified Communications Manager Version <= 7.1\(5\)su1a

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.43%	0.594

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.8	10	6.9	AV:N/AC:L/Au:N/C:N/I:N/A:C

http://www.cisco.com/en/US/products/products_security_advisory09186a0080b43908.shtml

Patch

Vendor Advisory

http://www.vupen.com/english/advisories/2010/2187

https://nvd.nist.gov/vuln/detail/CVE-2010-2837

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2010-2837

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2010-2837

EUVD