Code injection

2008-05-1612:54:00

PRIOn knowledge base

www.prio-n.com

7.1 High

AI Score

Confidence

High

0.021 Low

EPSS

Percentile

89.3%

JSON

The SNMP Trap Agent service in Cisco Unified Communications Manager (CUCM) 4.1 before 4.1(3)SR6, 4.2 before 4.2(3)SR3, 4.3 before 4.3(2), 5.x before 5.1(3), and 6.x before 6.1(1) allows remote attackers to cause a denial of service (core dump and service restart) via a series of malformed UDP packets, as demonstrated by the IP Stack Integrity Checker (ISIC), aka Bug ID CSCsj24113.

CPENameOperatorVersion
unified_communications_managereq4.1 3sr5b
unified_communications_managereq5.1 1
unified_communications_managereq6.1 1a
unified_communications_managereq5.1 2
unified_communications_managereq4.1 3sr5
unified_communications_managereq4.1 3sr5c
unified_communications_managereq6.1
unified_communications_managereq5.1 2a
unified_communications_managereq4.3
unified_communications_managereq4.1 3sr.5

Name	Operator	Version
unified_communications_manager	eq	4.1 3sr5b
unified_communications_manager	eq	5.1 1
unified_communications_manager	eq	6.1 1a
unified_communications_manager	eq	5.1 2
unified_communications_manager	eq	4.1 3sr5
unified_communications_manager	eq	4.1 3sr5c
unified_communications_manager	eq	6.1
unified_communications_manager	eq	5.1 2a
unified_communications_manager	eq	4.3
unified_communications_manager	eq	4.1 3sr.5