CVE-2010-2838

EPSS 0.43%
Veröffentlicht 26.08.2010 21:00:01
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle psirt@cisco.com
CVE-Watchlists
Login
Unerledigt
Login

The SendCombinedStatusInfo implementation in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 7.0SU before 7.0(2a)SU3, 7.1 before 7.1(5), and 8.0 before 8.0(3) allows remote attackers to cause a denial of service (process failure) via a malformed SIP REGISTER message, aka Bug ID CSCtf66305.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Cisco ≫ Unified Communications Manager Version <= 7.0\(2a\)su2

Cisco ≫ Unified Communications Manager Version <= 7.1\(5\)su1a

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.43%	0.594

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.8	10	6.9	AV:N/AC:L/Au:N/C:N/I:N/A:C

http://www.cisco.com/en/US/products/products_security_advisory09186a0080b43908.shtml

Patch

Vendor Advisory

http://www.vupen.com/english/advisories/2010/2187

https://nvd.nist.gov/vuln/detail/CVE-2010-2838

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2010-2838

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2010-2838

EUVD