Cisco Unified Border Element Denial of Service Vulnerability

A vulnerability in the Session Initiation Protocol (SIP) functionality of Cisco Unified Border Element (CUBE) could allow an unauthenticated, remote attacker to trigger a denial of service (DoS) condition.

The vulnerability is due to incorrect processing of SIP messages. An attacker could exploit this vulnerability by sending unsupported SIP messages to a CUBE.

Cisco has released software updates that address this vulnerability.

Workarounds that mitigate this vulnerability are not available.

This advisory is available at the following link:

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151026-cube[“https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151026-cube”]