CVE-2013-3461 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Cisco Unified Communications Manager

CWE-399CWE-119 — Improper Restriction of Operations within the Bounds of a Memory BufferCWE-20 — Improper Input Validation5 documents5 sources
Severity
7.1HIGHNVD
EPSS
0.5%
top 33.52%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Cisco Unified Communications Manager
Timeline
PublishedAug 25
Latest updateMay 17

Description

Cisco Unified Communications Manager (Unified CM) 8.5(x) and 8.6(x) before 8.6(2a)su3 and 9.x before 9.1(1) does not properly restrict the rate of SIP packets, which allows remote attackers to cause a denial of service (memory and CPU consumption, and service disruption) via a flood of UDP packets to port 5060, aka Bug ID CSCub35869.

CVSS vector

AV:N/AC:M/C:N/I:N/A:CExploitability: 8.6 | Impact: 6.9

Affected Packages1 packages

🔴Vulnerability Details

3
GHSA
GHSA-r7hf-97hq-qr83: Cisco Unified Communications Manager (Unified CM) 8↗2022-05-17
▶
OSV
qemu, qemu-kvm vulnerabilities↗2014-09-08
▶
CVEList
CVE-2013-3461: Cisco Unified Communications Manager (Unified CM) 8↗2013-08-25
▶

📋Vendor Advisories

1
Cisco
Multiple Vulnerabilities in Cisco Unified Communications Manager↗2013-08-21
▶
CVE-2013-3461 — Cisco vulnerability | cvebase