CVE-2015-0612
published 2015-04-03CVE-2015-0612: The Connection Conversation Manager (aka CuCsMgr) process in Cisco Unity Connection 8.5 before 8.5(1)SU6, 8.6 before 8.6(2a)SU4, and 9.x before 9.1(2)SU2, when…
PriorityP432high7.1CVSS 2.0
AVNACMAuNCNINAC
EPSS
1.67%
74.2th percentile
The Connection Conversation Manager (aka CuCsMgr) process in Cisco Unity Connection 8.5 before 8.5(1)SU6, 8.6 before 8.6(2a)SU4, and 9.x before 9.1(2)SU2, when SIP trunk integration is enabled, allows remote attackers to cause a denial of service (SIP outage) via a crafted UDP packet, aka Bug ID CSCuh25062.
Affected
19 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | unity_connection | — | — |
| cisco | unity_connection | — | — |
| cisco | unity_connection | — | — |
| cisco | unity_connection | — | — |
| cisco | unity_connection | — | — |
| cisco | unity_connection | — | — |
| cisco | unity_connection | — | — |
| cisco | unity_connection | — | — |
| cisco | unity_connection | — | — |
| cisco | unity_connection | — | — |
| cisco | unity_connection | — | — |
| cisco | unity_connection | — | — |
| cisco | unity_connection | — | — |
| cisco | unity_connection | — | — |
| cisco | unity_connection | — | — |
| cisco | unity_connection | — | — |
| cisco | unity_connection | — | — |
| cisco | unity_connection_8.5 | — | — |
| cisco | unity_connection_8.6 | — | — |
CVSS provenance
nvdv2.07.1HIGHAV:N/AC:M/Au:N/C:N/I:N/A:C
vendor_cisco7.1HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-c6hr-xqr4-99rx: The Connection Conversation Manager (aka CuCsMgr) process in Cisco Unity Connection 8
ghsa_unreviewed·2022-05-17
CVE-2015-0612 [HIGH] GHSA-c6hr-xqr4-99rx: The Connection Conversation Manager (aka CuCsMgr) process in Cisco Unity Connection 8
The Connection Conversation Manager (aka CuCsMgr) process in Cisco Unity Connection 8.5 before 8.5(1)SU6, 8.6 before 8.6(2a)SU4, and 9.x before 9.1(2)SU2, when SIP trunk integration is enabled, allows remote attackers to cause a denial of service (SIP outage) via a crafted UDP packet, aka Bug ID CSCuh25062.
Cisco
Multiple Vulnerabilities in Cisco Unity Connection
vendor_cisco·2015-04-01·CVSS 7.1
CVE-2015-0612 [HIGH] CWE-20 Multiple Vulnerabilities in Cisco Unity Connection
Multiple Vulnerabilities in Cisco Unity Connection
Cisco Unity Connection contains multiple vulnerabilities, when it is configured with Session Initiation Protocol (SIP) trunk integration. The vulnerabilities described in this advisory are denial of service vulnerabilities impacting the availability of Cisco Unity Connection for processing SIP messages.
Cisco has released software updates that address these vulnerabilities. Workarounds that mitigate these vulnerabilities are not available.
This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150401-cuc
Cisco
Multiple Vulnerabilities in Cisco Unity Connection
vendor_cisco
CVE-2015-0612 Multiple Vulnerabilities in Cisco Unity Connection
CVE-2015-0612: Multiple Vulnerabilities in Cisco Unity Connection
Cisco Unity Connection contains multiple vulnerabilities, when it is configured with Session Initiation Protocol (SIP) trunk integration. The vulnerabilities described in this advisory are denial of service vulnerabilities impacting the availability of Cisco Unity Connection for processing SIP messages. Cisco has released software updates that address these vulnerabilities.
CWE: CWE-20, CWE-399, CWE-20, CWE-399
Bug IDs: CSCuh25062, CSCul20444, CSCul26267, CSCuh25062, CSCul20444
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2015-04-03
Published