CVE-2010-0590: High severity Cisco Unified Communications Manager vulnerability

Published Mar 5, 2010

Updated

The CMSIPUtility component in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 7.x before 7.1(3a)su1 and 8.x before 8.0(1) allows remote attackers to cause a denial of service (process failure) via a malformed SIP Register message, aka Bug ID CSCtc37188.

Affected Software

5 affected components

Cisco Unified Communications Manager=7.0

Cisco Unified Communications Manager=7.0\(1\)

Cisco Unified Communications Manager=7.0\(2\)

Cisco Unified Communications Manager=7.1

Cisco Unified Communications Manager=8.0

Remediation

Patch Available

http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1b924.shtml

Event History

Mar 5, 2010

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Data Sourced

via NVD·04:30 PM

RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2010-0590?

CVE-2010-0590 has been classified as a denial of service vulnerability.

How do I fix CVE-2010-0590?

To address CVE-2010-0590, upgrade Cisco Unified Communications Manager to version 7.1(3a)su1 or 8.0(1) or later.

What types of attacks does CVE-2010-0590 allow?

CVE-2010-0590 allows remote attackers to cause a denial of service by sending a malformed SIP Register message.

Which versions of Cisco Unified Communications Manager are affected by CVE-2010-0590?

CVE-2010-0590 affects Cisco Unified Communications Manager versions 7.x before 7.1(3a)su1 and 8.x before 8.0(1).

What component is vulnerable in CVE-2010-0590?

The CMSIPUtility component in Cisco Unified Communications Manager is vulnerable to CVE-2010-0590.