Back to search
CVE-2014-3337
Published: Aug 12, 2014
Modified: Aug 6, 2024
PUBLISHED
Description
The SIP implementation in Cisco Unified Communications Manager (CM) 8.6(.2) and earlier allows remote authenticated users to cause a denial of service (process crash) via a crafted SIP message that is not properly handled during processing of an XML document, aka Bug ID CSCtq76428.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
69177
vdb-entry
x_refsource_BID
1030709
vdb-entry
x_refsource_SECTRACK
http://tools.cisco.com/security/center/viewAlert.x?alertId=35257
x_refsource_CONFIRM
60088
third-party-advisory
x_refsource_SECUNIA
cucm-cve20143337-dos(95245)
vdb-entry
x_refsource_XF
20140811 Cisco Unified Communications Manager SIP Subsystem Vulnerability
vendor-advisory
x_refsource_CISCO
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now