CVE-2010-0586
published 2010-03-25CVE-2010-0586: Cisco IOS 12.1 through 12.4, when Cisco Unified Communications Manager Express (CME) or Cisco Unified Survivable Remote Site Telephony (SRST) is enabled…
high7.8CVSS 3.1
AVNACLAuNCNINAC
Cisco IOS 12.1 through 12.4, when Cisco Unified Communications Manager Express (CME) or Cisco Unified Survivable Remote Site Telephony (SRST) is enabled, allows remote attackers to cause a denial of service (device reload) via a malformed Skinny Client Control Protocol (SCCP) message, aka Bug ID CSCsz49741, the "SCCP Request Handling Denial of Service Vulnerability."
Affected
94 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
Cisco
Cisco Unified Communications Manager Express Denial of Service Vulnerabilities
vendor_cisco·2010-03-24·CVSS 7.8
CVE-2010-0585 [HIGH] CWE-399 Cisco Unified Communications Manager Express Denial of Service Vulnerabilities
Cisco Unified Communications Manager Express Denial of Service Vulnerabilities
Devices running Cisco IOS® Software and
configured for Cisco Unified Communications Manager Express (CME) or Cisco
Unified Survivable Remote Site Telephony (SRST) operation are affected by two
denial of service vulnerabilities that may result in a device reload if
successfully exploited. The vulnerabilities are triggered when the Cisco IOS
device processes specific, malformed Skinny Call Control Protocol (SCCP)
messages.
Cisco has released software updates that address these vulnerabilities.
This advisory is posted at
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20100324-cucme.
Note: The March 24, 2010, Cisco IOS Software Security Advisory bundled
publication includes
Cisco
Cisco Unified Communications Manager Express Denial of Service Vulnerabilities
vendor_cisco
CVE-2010-0586 Cisco Unified Communications Manager Express Denial of Service Vulnerabilities
CVE-2010-0586: Cisco Unified Communications Manager Express Denial of Service Vulnerabilities
Devices running Cisco IOS ® Software and configured for Cisco Unified Communications Manager Express (CME) or Cisco Unified Survivable Remote Site Telephony (SRST) operation are affected by two denial of service vulnerabilities that may result in a device reload if successfully exploited. The vulnerabilities are triggered when the Cisco IOS device processes specific, malformed Skinny Call Control Protocol (SCCP) messages. Cisco has released software updates that address these vulnerabilities. This advisory is posted at https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20100324-cucme . Note: The March 24, 2010, Cisco IOS Software Security Advisory bundled public
GHSA
GHSA-8m6f-jm2w-hq3h: Cisco IOS 12
ghsa_unreviewed·2022-05-02
CVE-2010-0586 [HIGH] GHSA-8m6f-jm2w-hq3h: Cisco IOS 12
Cisco IOS 12.1 through 12.4, when Cisco Unified Communications Manager Express (CME) or Cisco Unified Survivable Remote Site Telephony (SRST) is enabled, allows remote attackers to cause a denial of service (device reload) via a malformed Skinny Client Control Protocol (SCCP) message, aka Bug ID CSCsz49741, the "SCCP Request Handling Denial of Service Vulnerability."
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://osvdb.org/63177http://secunia.com/advisories/39069http://tools.cisco.com/security/center/viewAlert.x?alertId=20070http://www.cisco.com/en/US/products/products_security_advisory09186a0080b20f33.shtmlhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6625http://osvdb.org/63177http://secunia.com/advisories/39069http://tools.cisco.com/security/center/viewAlert.x?alertId=20070http://www.cisco.com/en/US/products/products_security_advisory09186a0080b20f33.shtmlhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6625
2010-03-25
Published