CVE-2020-5726

CVE-2020-5726 affects the Grandstream UCM6200 series prior to 1.0.20.22. A SQL injection via the CTI server on port 8888 allows a remote, unauthenticated attacker to disclose user passwords by crafting a username. Remedy: upgrade to version 1.0.20.22 or later.

CVE-2020-5726

The Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an SQL injection via the CTI server on port 8888. A remote unauthenticated attacker can invoke the challenge action with a crafted username and discover user passwords...

Oracle CTI Web Service XML Entity Injection

An XML External Entity Injection vulnerability exists in Oracle CTI Web Service. Successful exploitation of this vulnerability could result in Denial of Service...

Oracle CTI Web Service - 'EBS_ASSET_HISTORY_OPERATIONS' XML Entity Injection

Exploit Title: Oracle CTI Web Service XML Entity Exp. Exploit Author: omurugur Author Web: https://www.justsecnow.com Author Social: @omurugurrr URL : http://server/EBSASSETHISTORYOPERATIONS As can be seen in the following request / response example, the xml entity expansion attack can be...

Oracle CTI Web Service - EBS_ASSET_HISTORY_OPERATIONS XML Entity Injection

Oracle CTI Web Service - EBSASSETHISTORYOPERATIONS XML Entity Injection Exploit Title: Oracle CTI Web Service XML Entity Exp. Exploit Author: omurugur Author Web: https://www.justsecnow.com Author Social: @omurugurrr URL : http://server/EBSASSETHISTORYOPERATIONS As can be seen in the following...

cti-cert.com.hk XSS vulnerability

Open Bug Bounty ID: OBB-570298 Description| Value ---|--- Affected Website:| cti-cert.com.hk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Cisco CallManager 1.0/2.0/3.x/4.0 CTI Manager Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/14251/info The CallManager CTI Manager service is susceptible to a remote denial of service vulnerability. This issue is documented in Cisco bug CSCee00116, which is available to Cisco customers. This issue may be exploit...

Hardcoded credentials

Cisco Unified Communications Manager CUCM 7.1x through 9.12 and the IM & Presence Service in Cisco Unified Presence Server through 9.12 use the same CTI and database-encryption key across different customers' installations, which makes it easier for context-dependent attackers to defeat...

CVE-2013-4869

Cisco Unified Communications Manager (CUCM) versions 7.1.x–9.1(2) and the IM & Presence Service in Cisco Unified Presence Server up to 9.1(2) share the same CTI and database-encryption key across different customer installations. This creates a cryptographic risk where context-dependent attackers...

n.runs-SA-2010.001 - Alcatel-Lucent - unauthenticated administrative access to CTI CCA Server

n.runs AG http://www.nruns.com/ securityatnruns.com n.runs-SA-2010.001 20-September-2010 Vendor: Alcatel Affected Products: Versions before 9.0.8.4 of the CCAgent option of OmniTouch Contact Center Standard Edition Vulnerability: unauthenticated administrative access to CTI CCA Server Risk: High...

CVE-2010-1570

The computer telephony integration CTI server component in Cisco Unified Contact Center Express UCCX 7.0 before 7.01SR4 and 7.02, 6.0 before 6.01SR1, and 5.0 before 5.02SR3 allows remote attackers to cause a denial of service CTI server and Node Manager failure via a malformed CTI message...

Design/Logic Flaw

The computer telephony integration CTI server component in Cisco Unified Contact Center Express UCCX 7.0 before 7.01SR4 and 7.02, 6.0 before 6.01SR1, and 5.0 before 5.02SR3 allows remote attackers to cause a denial of service CTI server and Node Manager failure via a malformed CTI message...

CVE-2010-1570

The computer telephony integration CTI server component in Cisco Unified Contact Center Express UCCX 7.0 before 7.01SR4 and 7.02, 6.0 before 6.01SR1, and 5.0 before 5.02SR3 allows remote attackers to cause a denial of service CTI server and Node Manager failure via a malformed CTI message...

CVE-2010-1570

Cisco UCCX CTI server DoS vulnerability (CVE-2010-1570) affects CTI server in UCCX 7.0 (before 7.0(1)SR4 and 7.0(2)), 6.0 (before 6.0(1)SR1), and 5.0 (before 5.0(2)SR3). A malformed CTI message triggers the CTI server and Node Manager to fail, logging out all active agents and causing temporary s...

Design/Logic Flaw

The CTI Manager service in Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.x before 4.32sr1a, 6.x before 6.13, 7.0x before 7.02, 7.1x before 7.12, and 8.x before 8.01 allows remote attackers to cause a denial of service service failure via a malformed message, aka Bug ID...

CVE-2010-0592

The CTI Manager service in Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.x before 4.32sr1a, 6.x before 6.13, 7.0x before 7.02, 7.1x before 7.12, and 8.x before 8.01 allows remote attackers to cause a denial of service service failure via a malformed message, aka Bug ID...

CVE-2010-0592

CVE-2010-0592 affects Cisco Unified Communications Manager CTI Manager service. A malformed message to CTI Manager (TCP 2748) can cause a DoS (service failure). The issue is fixed in CUCM releases: 4.3(2)sr1a, 6.1(3), 7.0(2), 7.1(2), and 8.0(1). Other Cisco CUCM components (SCCP/SIP) also documen...

Cisco Unified Communications Manager DoS

DoS on SIP and SCCP Skinny protocols, on CTI Manager TCP/2748 request parsing...

Cisco Security Advisory: Cisco Unified Communications Manager Denial of Service Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Unified Communications Manager Denial of Service Vulnerabilities Advisory ID: cisco-sa-20100303-cucm Revision 1.0 For Public Release 2010 March 3 1600 UTC GMT...

Cisco Unified Communications Manager CTI服务拒绝服务漏洞

BUGTRAQ ID: 29933 CVECAN ID: CVE-2008-2061 Cisco Unified Communications Manager（CUCM，之前被称为CallManager）是Cisco IP电话解决方案中的呼叫处理组件。 CUCM的计算机电话集成（CTI）管理器服务在处理畸形输入时存在拒绝服务漏洞，远程攻击者可以通过向默认的TCP 2748监听端口发送恶意报文导致语音服务中断。 Cisco Unified Communications Manager 6.x Cisco Unified Communications Manager 5.x 临时解决方法：...