CVE-2015-0614: High severity Cisco Unity Connection vulnerability
The Connection Conversation Manager (aka CuCsMgr) process in Cisco Unity Connection 8.5 before 8.5(1)SU7, 8.6 before 8.6(2a)SU4, 9.x before 9.1(2)SU2, and 10.0 before 10.0(1)SU1, when SIP trunk integration is enabled, allows remote attackers to cause a denial of service (core dump and restart) via crafted SIP INVITE messages, aka Bug ID CSCul26267.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-0614?
CVE-2015-0614 has a high severity and can lead to denial of service due to a core dump and restart of the affected Cisco Unity Connection process.
How do I fix CVE-2015-0614?
To fix CVE-2015-0614, upgrade your Cisco Unity Connection to the latest version specified in the security advisory.
Which versions of Cisco Unity Connection are affected by CVE-2015-0614?
CVE-2015-0614 affects Cisco Unity Connection versions prior to 8.5(1)SU7, 8.6(2a)SU4, 9.1(2)SU2, and 10.0(1)SU1.
Can CVE-2015-0614 be exploited remotely?
Yes, CVE-2015-0614 can be exploited remotely when SIP trunk integration is enabled.
What should I do if I cannot update to a fixed version for CVE-2015-0614?
If you cannot update to a fixed version for CVE-2015-0614, consider implementing network segmentation and access controls to limit exposure to the vulnerability.