CVE-2020-3163: Race Condition
First published: Wed Feb 19 2020(Updated: )
A vulnerability in the Live Data server of Cisco Unified Contact Center Enterprise could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability exists because the affected software improperly manages resources when processing inbound Live Data traffic. An attacker could exploit this vulnerability by sending multiple crafted Live Data packets to an affected device. A successful exploit could cause the affected device to run out of buffer resources, which could result in a stack overflow and cause the affected device to reload, resulting in a DoS condition. Note: The Live Data port in Cisco Unified Contact Center Enterprise devices allows only a single TCP connection. To exploit this vulnerability, an attacker would have to send crafted packets to an affected device before a legitimate Live Data client establishes a connection.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Unified Contact Center Enterprise | <12.5\(1\) |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2020-3163?
CVE-2020-3163 is a vulnerability in the Live Data server of Cisco Unified Contact Center Enterprise that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition.
What is the severity of CVE-2020-3163?
The severity of CVE-2020-3163 is high, with a severity value of 5.9.
How does CVE-2020-3163 affect Cisco Unified Contact Center Enterprise?
CVE-2020-3163 affects Cisco Unified Contact Center Enterprise by improperly managing resources when processing live data, which can lead to a denial of service (DoS) condition.
What is the recommended fix for CVE-2020-3163?
To fix CVE-2020-3163, apply the necessary updates provided by Cisco.
Where can I find more information about CVE-2020-3163?
You can find more information about CVE-2020-3163 on the Cisco Security Advisory page: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucce-tip-dos-7cdLUASb
- collector/nvd-index
- vendor/cisco
- canonical/cisco unified contact center enterprise