CVE-2020-27121 — Uncaught Exception in Cisco Unified Communications Manager IM AND Presence Service

CWE-248 — Uncaught ExceptionCWE-755 — Improper Handling of Exceptional Conditions4 documents4 sources
Severity
6.5MEDIUMNVD
CNA4.3
EPSS
0.6%
top 29.61%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Cisco Unified Communications Manager IM AND Presence ServiceCisco Unified Communications Manager IM AND Presence Service
Timeline
PublishedNov 6
Latest updateMay 24

Description

A vulnerability in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) Software could allow an authenticated, remote attacker to cause the Cisco XCP Authentication Service on an affected device to restart, resulting in a denial of service (DoS) condition. The vulnerability is due to improper handling of login requests. An attacker could exploit this vulnerability by sending a crafted client login request to an affected device. A successful exploit could allow the attacke…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 2.8 | Impact: 3.6

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-7c3f-h49g-4mg6: A vulnerability in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) Software could allow an authenticated, remote attacker↗2022-05-24
▶
CVEList
Cisco Unified Communications Manager IM and Presence Service Denial of Service Vulnerability↗2020-11-06
▶

📋Vendor Advisories

1
Cisco
Cisco Unified Communications Manager IM and Presence Service Denial of Service Vulnerability↗2020-11-04
▶
CVE-2020-27121 — Uncaught Exception in Cisco | cvebase