CVE-2014-3337

CWE-20 — Improper Input Validation4 documents4 sources
Severity
6.8MEDIUM
EPSS
1.8%
top 17.11%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Cisco Unified Communications Domain Manager
Timeline
PublishedAug 12
Latest updateMay 17

Description

The SIP implementation in Cisco Unified Communications Manager (CM) 8.6(.2) and earlier allows remote authenticated users to cause a denial of service (process crash) via a crafted SIP message that is not properly handled during processing of an XML document, aka Bug ID CSCtq76428.

CVSS vector

AV:N/AC:L/C:N/I:N/A:CExploitability: 8.0 | Impact: 6.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-xr43-rqjg-v94q: The SIP implementation in Cisco Unified Communications Manager (CM) 8↗2022-05-17
▶
CVEList
CVE-2014-3337: The SIP implementation in Cisco Unified Communications Manager (CM) 8↗2014-08-12
▶

📋Vendor Advisories

1
Cisco
Cisco Unified Communications Manager SIP Subsystem Vulnerability↗2014-08-11
▶
CVE-2014-3337 (MEDIUM CVSS 6.8) | The SIP implementation in Cisco Uni | cvebase.io