Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Enterprise License Manager ELM in Cisco Unified Communications Manager CM allows remote attackers to hijack the authentication of arbitrary users for requests that make ELM modifications, aka Bug ID CSCui58210...

Code injection

The Cisco Unified IP Phone 8945 with software 9.32 allows remote attackers to cause a denial of service device hang via a malformed PNG file, aka Bug ID CSCud04270...

CVE-2013-3472

The CVE concerns Cisco Unified Communications Manager’s Enterprise License Manager (ELM) and a Cross-site Request Forgery (CSRF) flaw that lets an attacker hijack the authentication of arbitrary users to perform ELM-modifying requests. Affected component: ELM within CM; root cause: CSRF vulnerabi...

CVE-2013-3472

Cross-site request forgery CSRF vulnerability in the Enterprise License Manager ELM in Cisco Unified Communications Manager CM allows remote attackers to hijack the authentication of arbitrary users for requests that make ELM modifications, aka Bug ID CSCui58210...

CVE-2013-3468

Cisco Unified IP Phone 8945 (software 9.3(2)) is affected by CVE-2013-3468 due to incorrect processing of malformed PNG images, which can remotely trigger a device hang/lockup (denial of service). Evidence from Cisco advisory Cisco-SA-20130828-CVE-2013-3468 and multiple third-party sources confir...

CVE-2013-3460

Memory leak in Cisco Unified Communications Manager Unified CM 8.5x before 8.51su6, 8.6x before 8.62asu3, and 9.x before 9.11 allows remote attackers to cause a denial of service service disruption via a high rate of UDP packets, aka Bug ID CSCub85597...

CVE-2013-3459

Cisco Unified Communications Manager Unified CM 7.1x before 7.15bsu6a does not properly handle errors, which allows remote attackers to cause a denial of service service disruption via malformed registration messages, aka Bug ID CSCuf93466...

CVE-2013-3462

Buffer overflow in Cisco Unified Communications Manager Unified CM 7.1x before 7.15bsu6, 8.5x before 8.51su6, 8.6x before 8.62asu3, and 9.x before 9.12 allows remote authenticated users to execute arbitrary code via unspecified vectors, aka Bug ID CSCud54358...

CVE-2013-3461

Cisco Unified Communications Manager Unified CM 8.5x and 8.6x before 8.62asu3 and 9.x before 9.11 does not properly restrict the rate of SIP packets, which allows remote attackers to cause a denial of service memory and CPU consumption, and service disruption via a flood of UDP packets to port...

Memory corruption

Memory leak in Cisco Unified Communications Manager Unified CM 8.5x before 8.51su6, 8.6x before 8.62asu3, and 9.x before 9.11 allows remote attackers to cause a denial of service service disruption via a high rate of UDP packets, aka Bug ID CSCub85597...

Code injection

Cisco Unified Communications Manager Unified CM 8.5x and 8.6x before 8.62asu3 and 9.x before 9.11 does not properly restrict the rate of SIP packets, which allows remote attackers to cause a denial of service memory and CPU consumption, and service disruption via a flood of UDP packets to port...

Buffer overflow

Buffer overflow in Cisco Unified Communications Manager Unified CM 7.1x before 7.15bsu6, 8.5x before 8.51su6, 8.6x before 8.62asu3, and 9.x before 9.12 allows remote authenticated users to execute arbitrary code via unspecified vectors, aka Bug ID CSCud54358...

Code injection

Cisco Unified Communications Manager Unified CM 7.1x before 7.15bsu6a does not properly handle errors, which allows remote attackers to cause a denial of service service disruption via malformed registration messages, aka Bug ID CSCuf93466...

CVE-2013-3461

Cisco Unified Communications Manager Unified CM 8.5x and 8.6x before 8.62asu3 and 9.x before 9.11 does not properly restrict the rate of SIP packets, which allows remote attackers to cause a denial of service memory and CPU consumption, and service disruption via a flood of UDP packets to port...

CVE-2013-3461

CVE-2013-3461 affects Cisco Unified Communications Manager (CUCM) 8.5(x) and 8.6(x) before 8.6(2a)su3 and 9.x before 9.1(1). The vulnerability is a DoS caused by insufficient rate limiting of SIP traffic, allowing remote attackers to flood UDP 5060 and exhaust memory/CPU, leading to service disru...

CVE-2013-3462

Buffer overflow in Cisco Unified Communications Manager Unified CM 7.1x before 7.15bsu6, 8.5x before 8.51su6, 8.6x before 8.62asu3, and 9.x before 9.12 allows remote authenticated users to execute arbitrary code via unspecified vectors, aka Bug ID CSCud54358...

CVE-2013-3462

Cisco Unified Communications Manager (Unified CM) is affected by CVE-2013-3462, a remote buffer overflow (Bug ID CSCud54358) that could allow an authenticated, remote attacker to execute arbitrary code. Impact applies to CUCM 7.1(x) before 7.1(5b)su6, 8.5(x) before 8.5(1)su6, 8.6(x) before 8.6(2a...

CVE-2013-3460

CVE-2013-3460 affects Cisco Unified Communications Manager (CUCM) versions 8.5.x before 8.5(1)su6, 8.6.x before 8.6(2a)su3, and 9.x before 9.1(1). It describes a memory leak vulnerability that lets remote attackers cause a denial of service (service disruption) by sending a high rate of UDP packe...

CVE-2013-3459

Cisco Unified Communications Manager Unified CM 7.1x before 7.15bsu6a does not properly handle errors, which allows remote attackers to cause a denial of service service disruption via malformed registration messages, aka Bug ID CSCuf93466...

CVE-2013-3460

Memory leak in Cisco Unified Communications Manager Unified CM 8.5x before 8.51su6, 8.6x before 8.62asu3, and 9.x before 9.11 allows remote attackers to cause a denial of service service disruption via a high rate of UDP packets, aka Bug ID CSCub85597...