Cisco Intelligent Contact Manager vulnerabilities

2 known vulnerabilities affecting cisco/intelligent_contact_manager.

Total CVEs

2

CISA KEV

0

Public exploits

1

Exploited in wild

0

Severity breakdown

CRITICAL1MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2010-3040CRITICALCVSS 10.0≤ 6.0\(0\)a\(1\)v5.0+25 more2010-11-09

CVE-2010-3040 [CRITICAL] CWE-119 CVE-2010-3040: Multiple stack-based buffer overflows in agent.exe in Setup Manager in Cisco Intelligent Contact Man Multiple stack-based buffer overflows in agent.exe in Setup Manager in Cisco Intelligent Contact Manager (ICM) before 7.0 allow remote attackers to execute arbitrary code via a long parameter in a (1) HandleUpgradeAll, (2) AgentUpgrade, (3) HandleQueryNodeInfoReq, or (4) HandleUpgradeTrace TCP packet, aka Bug IDs CSCti45698, CSCti45715, CSCti45726,

CVE-2005-0356MEDIUMCVSS 5.0PoCv5.02005-05-31

CVE-2005-0356 [MEDIUM] CVE-2005-0356: Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timest Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a spoofed packet with a large timer value, which causes the host to discard later packets because they appear to be too old.