cisco-sa-cucm-dos-4Ag3yWbD: Cisco Unified Communications Manager Denial of Service Vulnerability
First published: Wed Jun 07 2023(Updated: )
A vulnerability in the Administrative XML Web Service (AXL) API of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an authenticated, remote attacker to cause a denial of service (DoS) condition
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Unified Communications Manager Session Management Edition | ||
| Cisco Unified Communications Manager Session Management Edition |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-cucm-dos-4Ag3yWbD?
The severity of cisco-sa-cucm-dos-4Ag3yWbD is considered critical due to its potential to cause a denial of service.
How do I fix cisco-sa-cucm-dos-4Ag3yWbD?
To fix cisco-sa-cucm-dos-4Ag3yWbD, it is recommended to apply the latest patches released by Cisco for Unified Communications Manager.
Who is affected by cisco-sa-cucm-dos-4Ag3yWbD?
Organizations using Cisco Unified Communications Manager or Cisco Unified Communications Manager Session Management Edition are affected by cisco-sa-cucm-dos-4Ag3yWbD.
What type of attack does cisco-sa-cucm-dos-4Ag3yWbD facilitate?
cisco-sa-cucm-dos-4Ag3yWbD facilitates a remote authenticated denial of service attack via the AXL API.
Is authentication necessary to exploit cisco-sa-cucm-dos-4Ag3yWbD?
Yes, an attacker must be authenticated to exploit the cisco-sa-cucm-dos-4Ag3yWbD vulnerability.
- collector/cisco-recent
- agent/type
- agent/event
- agent/last-modified-date
- agent/first-publish-date
- agent/title
- agent/weakness
- agent/severity
- agent/references
- agent/description
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco unified communications manager session management edition