CVE-2013-1133: Input Validation

Published Feb 27, 2013

Updated

Cisco Unified Communications Manager (CUCM) 8.6 before 8.6(2a)su2, 8.6 BE3k before 8.6(4) BE3k, and 9.x before 9.0(1) allows remote attackers to cause a denial of service (CPU consumption and GUI and voice outages) via malformed packets to unused UDP ports, aka Bug ID CSCtx43337.

Affected Software

8 affected components

Cisco Unified Communications Manager=8.6

Cisco Unified Communications Manager=8.6\(1\)

Cisco Unified Communications Manager=8.6\(1a\)

Cisco Unified Communications Manager=8.6\(2\)

Cisco Unified Communications Manager=8.6\(2a\)

Cisco Unified Communications Manager=8.6\(2a\)su1

Cisco Unified Communications Manager=8.6\(4\)

Cisco Unified Communications Manager=9.0\(1\)

Event History

Feb 27, 2013

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2013-1133?

CVE-2013-1133 has a medium severity rating due to its potential to cause denial of service.

How do I fix CVE-2013-1133?

To fix CVE-2013-1133, update your Cisco Unified Communications Manager to versions 8.6(2a)su2, 8.6(4) for BE3k, or 9.0(1) or later.

What types of devices are affected by CVE-2013-1133?

CVE-2013-1133 affects Cisco Unified Communications Manager versions 8.6 and 9.x before 9.0(1).

What vulnerability does CVE-2013-1133 exploit?

CVE-2013-1133 exploits vulnerabilities related to malformed packets sent to unused UDP ports.

Can CVE-2013-1133 lead to service outages?

Yes, CVE-2013-1133 can lead to CPU consumption, GUI outages, and voice outages.