CVE-2007-3775

CWE-200 — Information Exposure CWE-2644 documents4 sources

Severity

7.8HIGH

EPSS

1.5%

top 18.62%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Cisco Unified Communications Manager Cisco Unified Presence Server

Timeline

PublishedJul 15

Latest updateMay 1

Description

Unspecified vulnerability in Cisco Unified Communications Manager (CUCM, formerly CallManager) and Unified Presence Server (CUPS) allows remote attackers to cause a denial of service (loss of cluster services) via unspecified vectors, aka (1) CSCsj09859 and (2) CSCsj19985.

CVSS vector

AV:N/AC:L/C:N/I:N/A:CExploitability: 10.0 | Impact: 6.9

Affected Packages2 packages

▶NVDcisco/unified_presence_server4 versions+3

▶NVDcisco/unified_communications_manager5.0, 5.1\(1\), 5.1\(2\)+2

Patches

Patch: www.cisco.com ↗Patch: www.cisco.com ↗

🔴Vulnerability Details

GHSA

GHSA-rgx6-gghj-w753: Unspecified vulnerability in Cisco Unified Communications Manager (CUCM, formerly CallManager) and Unified Presence Server (CUPS) allows remote attack↗2022-05-01

▶

CVEList

CVE-2007-3775: Unspecified vulnerability in Cisco Unified Communications Manager (CUCM, formerly CallManager) and Unified Presence Server (CUPS) allows remote attack↗2007-07-15

▶

📋Vendor Advisories

Cisco

Cisco Unified Communications Manager and Presence Server Unauthorized Access Vulnerabilities↗2007-07-11

▶