CVE-2012-2490

CVE-2012-2490 affects Cisco IP Communicator 8.6. An unauthenticated, remote attacker could carry out a Man-in-the-Middle attack to replace or modify the Certificate Trust List due to insufficient validation of signing certificates in the Trust List (Bug CSCtz01471). Exploitation details are not f...

CVE-2012-0361

CVE-2012-0361 affects the sccp-protocol component in Cisco IP Communicator (CIPC) versions 7.0–8.6. The issue is that it does not limit the rate of SCCP messages to Cisco Unified Communications Manager (CUCM), which allows remote attackers to cause a denial of service via vectors that trigger (1)...