CVE-2010-2835

2010-09-2319:00:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cisco

ios

unified communications manager

denial of service

sip

refer-to header

vulnerability

6.7 Medium

AI Score

Confidence

Low

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.002 Low

EPSS

Percentile

51.6%

JSON

Cisco IOS 12.2 through 12.4 and 15.0 through 15.1, Cisco IOS XE 2.5.x and 2.6.x before 2.6.1, and Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5), 7.0 before 7.0(2a)su3, 7.1su before 7.1(3b)su2, 7.1 before 7.1(5), and 8.0 before 8.0(1) allow remote attackers to cause a denial of service (device reload or voice-services outage) via a SIP REFER request with an invalid Refer-To header, aka Bug IDs CSCta20040 and CSCta31358.

CPENameOperatorVersion
cisco:ioscisco ioseq12.3ym
cisco:ioscisco ioseq12.3yq
cisco:ioscisco ioseq12.3xr
cisco:ioscisco ioseq12.4t
cisco:ioscisco ioseq12.1xm
cisco:ioscisco ioseq12.1xi
cisco:ioscisco ioseq12.3ya
cisco:ioscisco ioseq12.1xp
cisco:ioscisco ioseq12.2cz
cisco:ios_xecisco ios xeeq2.5.0

CPE	Name	Operator	Version
cisco:ios	cisco ios	eq	12.3ym
cisco:ios	cisco ios	eq	12.3yq
cisco:ios	cisco ios	eq	12.3xr
cisco:ios	cisco ios	eq	12.4t
cisco:ios	cisco ios	eq	12.1xm
cisco:ios	cisco ios	eq	12.1xi
cisco:ios	cisco ios	eq	12.3ya
cisco:ios	cisco ios	eq	12.1xp
cisco:ios	cisco ios	eq	12.2cz
cisco:ios_xe	cisco ios xe	eq	2.5.0