CVE-2010-0585
published 2010-03-25CVE-2010-0585: Cisco IOS 12.1 through 12.4, when Cisco Unified Communications Manager Express (CME) or Cisco Unified Survivable Remote Site Telephony (SRST) is enabled…
PriorityP434high7.8CVSS 2.0
AVNACLAuNCNINAC
EPSS
1.62%
73.5th percentile
Cisco IOS 12.1 through 12.4, when Cisco Unified Communications Manager Express (CME) or Cisco Unified Survivable Remote Site Telephony (SRST) is enabled, allows remote attackers to cause a denial of service (device reload) via a malformed Skinny Client Control Protocol (SCCP) message, aka Bug ID CSCsz48614, the "SCCP Packet Processing Denial of Service Vulnerability."
Affected
94 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
CVSS provenance
nvdv2.07.8HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C
vendor_cisco7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-g7jc-5wm7-65m8: Cisco IOS 12
ghsa_unreviewed·2022-05-02
CVE-2010-0585 [HIGH] GHSA-g7jc-5wm7-65m8: Cisco IOS 12
Cisco IOS 12.1 through 12.4, when Cisco Unified Communications Manager Express (CME) or Cisco Unified Survivable Remote Site Telephony (SRST) is enabled, allows remote attackers to cause a denial of service (device reload) via a malformed Skinny Client Control Protocol (SCCP) message, aka Bug ID CSCsz48614, the "SCCP Packet Processing Denial of Service Vulnerability."
Cisco
Cisco Unified Communications Manager Express Denial of Service Vulnerabilities
vendor_cisco·2010-03-24·CVSS 7.8
CVE-2010-0585 [HIGH] CWE-399 Cisco Unified Communications Manager Express Denial of Service Vulnerabilities
Cisco Unified Communications Manager Express Denial of Service Vulnerabilities
Devices running Cisco IOS® Software and
configured for Cisco Unified Communications Manager Express (CME) or Cisco
Unified Survivable Remote Site Telephony (SRST) operation are affected by two
denial of service vulnerabilities that may result in a device reload if
successfully exploited. The vulnerabilities are triggered when the Cisco IOS
device processes specific, malformed Skinny Call Control Protocol (SCCP)
messages.
Cisco has released software updates that address these vulnerabilities.
This advisory is posted at
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20100324-cucme.
Note: The March 24, 2010, Cisco IOS Software Security Advisory bundled
publication includes
Cisco
Cisco Unified Communications Manager Express Denial of Service Vulnerabilities
vendor_cisco
CVE-2010-0585 Cisco Unified Communications Manager Express Denial of Service Vulnerabilities
CVE-2010-0585: Cisco Unified Communications Manager Express Denial of Service Vulnerabilities
Devices running Cisco IOS ® Software and configured for Cisco Unified Communications Manager Express (CME) or Cisco Unified Survivable Remote Site Telephony (SRST) operation are affected by two denial of service vulnerabilities that may result in a device reload if successfully exploited. The vulnerabilities are triggered when the Cisco IOS device processes specific, malformed Skinny Call Control Protocol (SCCP) messages. Cisco has released software updates that address these vulnerabilities. This advisory is posted at https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20100324-cucme . Note: The March 24, 2010, Cisco IOS Software Security Advisory bundled public
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://secunia.com/advisories/39069http://tools.cisco.com/security/center/viewAlert.x?alertId=20069http://www.cisco.com/en/US/products/products_security_advisory09186a0080b20f33.shtmlhttp://secunia.com/advisories/39069http://tools.cisco.com/security/center/viewAlert.x?alertId=20069http://www.cisco.com/en/US/products/products_security_advisory09186a0080b20f33.shtml
2010-03-25
Published