CVE-2010-2838: High severity Cisco Unified Communications Manager vulnerability
The SendCombinedStatusInfo implementation in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 7.0SU before 7.0(2a)SU3, 7.1 before 7.1(5), and 8.0 before 8.0(3) allows remote attackers to cause a denial of service (process failure) via a malformed SIP REGISTER message, aka Bug ID CSCtf66305.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2010-2838?
CVE-2010-2838 is classified as a denial of service vulnerability affecting Cisco Unified Communications Manager.
How do I fix CVE-2010-2838?
To fix CVE-2010-2838, upgrade Cisco Unified Communications Manager to a version that is not affected by this vulnerability.
What versions of Cisco Unified Communications Manager are affected by CVE-2010-2838?
Affected versions include Cisco Unified Communications Manager 7.0SU prior to 7.0(2a)SU3, 7.1 before 7.1(5), and 8.0 before 8.0(3).
Can CVE-2010-2838 be exploited remotely?
Yes, CVE-2010-2838 can be exploited remotely through a malformed SIP REGISTER message.
What is the potential impact of CVE-2010-2838?
The potential impact of CVE-2010-2838 is a denial of service condition that may cause process failures.