ID CVE-2021-1478
Summary A vulnerability in the Java Management Extensions (JMX) component of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected system. This vulnerability is due to an unsecured TCP/IP port. An attacker could exploit this vulnerability by accessing the port and restarting the JMX process. A successful exploit could allow the attacker to cause a DoS condition on an affected system.
References
Vulnerable Configurations
  • cpe:2.3:a:cisco:hosted_collaboration_mediation_fulfillment:-:*:*:*:*:*:*:*
    cpe:2.3:a:cisco:hosted_collaboration_mediation_fulfillment:-:*:*:*:*:*:*:*
  • cpe:2.3:a:cisco:hosted_collaboration_mediation_fulfillment:10.0\(1\):*:*:*:*:*:*:*
    cpe:2.3:a:cisco:hosted_collaboration_mediation_fulfillment:10.0\(1\):*:*:*:*:*:*:*
  • cpe:2.3:a:cisco:hosted_collaboration_mediation_fulfillment:10.1\(1\):*:*:*:*:*:*:*
    cpe:2.3:a:cisco:hosted_collaboration_mediation_fulfillment:10.1\(1\):*:*:*:*:*:*:*
  • cpe:2.3:a:cisco:hosted_collaboration_mediation_fulfillment:10.1\(2\):*:*:*:*:*:*:*
    cpe:2.3:a:cisco:hosted_collaboration_mediation_fulfillment:10.1\(2\):*:*:*:*:*:*:*
  • cpe:2.3:a:cisco:hosted_collaboration_mediation_fulfillment:10.6\(1\):*:*:*:*:*:*:*
    cpe:2.3:a:cisco:hosted_collaboration_mediation_fulfillment:10.6\(1\):*:*:*:*:*:*:*
  • cpe:2.3:a:cisco:hosted_collaboration_mediation_fulfillment:10.6\(1\).0:*:*:*:*:*:*:*
    cpe:2.3:a:cisco:hosted_collaboration_mediation_fulfillment:10.6\(1\).0:*:*:*:*:*:*:*
  • cpe:2.3:a:cisco:hosted_collaboration_mediation_fulfillment:10.6\(1\)_base:*:*:*:*:*:*:*
    cpe:2.3:a:cisco:hosted_collaboration_mediation_fulfillment:10.6\(1\)_base:*:*:*:*:*:*:*
  • cpe:2.3:a:cisco:hosted_collaboration_mediation_fulfillment:10.6\(2\).0:*:*:*:*:*:*:*
    cpe:2.3:a:cisco:hosted_collaboration_mediation_fulfillment:10.6\(2\).0:*:*:*:*:*:*:*
  • cpe:2.3:a:cisco:hosted_collaboration_mediation_fulfillment:10.6\(2\)_base:*:*:*:*:*:*:*
    cpe:2.3:a:cisco:hosted_collaboration_mediation_fulfillment:10.6\(2\)_base:*:*:*:*:*:*:*
  • cpe:2.3:a:cisco:hosted_collaboration_mediation_fulfillment:10.6\(3\).0:*:*:*:*:*:*:*
    cpe:2.3:a:cisco:hosted_collaboration_mediation_fulfillment:10.6\(3\).0:*:*:*:*:*:*:*
  • cpe:2.3:a:cisco:hosted_collaboration_mediation_fulfillment:10.6\(3\)_base:*:*:*:*:*:*:*
    cpe:2.3:a:cisco:hosted_collaboration_mediation_fulfillment:10.6\(3\)_base:*:*:*:*:*:*:*
  • cpe:2.3:a:cisco:hosted_collaboration_mediation_fulfillment:11.5:*:*:*:*:*:*:*
    cpe:2.3:a:cisco:hosted_collaboration_mediation_fulfillment:11.5:*:*:*:*:*:*:*
  • cpe:2.3:a:cisco:hosted_collaboration_mediation_fulfillment:11.5\(1\).0:*:*:*:*:*:*:*
    cpe:2.3:a:cisco:hosted_collaboration_mediation_fulfillment:11.5\(1\).0:*:*:*:*:*:*:*
  • cpe:2.3:a:cisco:hosted_collaboration_mediation_fulfillment:11.5\(2\):*:*:*:*:*:*:*
    cpe:2.3:a:cisco:hosted_collaboration_mediation_fulfillment:11.5\(2\):*:*:*:*:*:*:*
  • cpe:2.3:a:cisco:hosted_collaboration_mediation_fulfillment:11.5\(3\):*:*:*:*:*:*:*
    cpe:2.3:a:cisco:hosted_collaboration_mediation_fulfillment:11.5\(3\):*:*:*:*:*:*:*
  • cpe:2.3:a:cisco:hosted_collaboration_mediation_fulfillment:12.5:*:*:*:*:*:*:*
    cpe:2.3:a:cisco:hosted_collaboration_mediation_fulfillment:12.5:*:*:*:*:*:*:*
  • cpe:2.3:a:cisco:hosted_collaboration_mediation_fulfillment:12.5\(1\):*:*:*:*:*:*:*
    cpe:2.3:a:cisco:hosted_collaboration_mediation_fulfillment:12.5\(1\):*:*:*:*:*:*:*
  • cpe:2.3:a:cisco:hosted_collaboration_mediation_fulfillment:12.5\(1\)su2:*:*:*:*:*:*:*
    cpe:2.3:a:cisco:hosted_collaboration_mediation_fulfillment:12.5\(1\)su2:*:*:*:*:*:*:*
  • cpe:2.3:a:cisco:unified_communications_manager:10.5\(2\):*:*:*:-:*:*:*
    cpe:2.3:a:cisco:unified_communications_manager:10.5\(2\):*:*:*:-:*:*:*
  • cpe:2.3:a:cisco:unified_communications_manager:10.5\(2\)su1:*:*:*:-:*:*:*
    cpe:2.3:a:cisco:unified_communications_manager:10.5\(2\)su1:*:*:*:-:*:*:*
  • cpe:2.3:a:cisco:unified_communications_manager:10.5\(2\)su2:*:*:*:-:*:*:*
    cpe:2.3:a:cisco:unified_communications_manager:10.5\(2\)su2:*:*:*:-:*:*:*
  • cpe:2.3:a:cisco:unified_communications_manager:10.5\(2\)su2a:*:*:*:-:*:*:*
    cpe:2.3:a:cisco:unified_communications_manager:10.5\(2\)su2a:*:*:*:-:*:*:*
  • cpe:2.3:a:cisco:unified_communications_manager:10.5\(2\)su3:*:*:*:-:*:*:*
    cpe:2.3:a:cisco:unified_communications_manager:10.5\(2\)su3:*:*:*:-:*:*:*
  • cpe:2.3:a:cisco:unified_communications_manager:10.5\(2\)su3a:*:*:*:-:*:*:*
    cpe:2.3:a:cisco:unified_communications_manager:10.5\(2\)su3a:*:*:*:-:*:*:*
  • cpe:2.3:a:cisco:unified_communications_manager:10.5\(2\)su4:*:*:*:-:*:*:*
    cpe:2.3:a:cisco:unified_communications_manager:10.5\(2\)su4:*:*:*:-:*:*:*
  • cpe:2.3:a:cisco:unified_communications_manager:10.5\(2\)su4a:*:*:*:-:*:*:*
    cpe:2.3:a:cisco:unified_communications_manager:10.5\(2\)su4a:*:*:*:-:*:*:*
  • cpe:2.3:a:cisco:unified_communications_manager:10.5\(2\)su6:*:*:*:-:*:*:*
    cpe:2.3:a:cisco:unified_communications_manager:10.5\(2\)su6:*:*:*:-:*:*:*
  • cpe:2.3:a:cisco:unified_communications_manager:10.5\(2\)su6a:*:*:*:-:*:*:*
    cpe:2.3:a:cisco:unified_communications_manager:10.5\(2\)su6a:*:*:*:-:*:*:*
  • cpe:2.3:a:cisco:unified_communications_manager:10.5\(2\)su7:*:*:*:-:*:*:*
    cpe:2.3:a:cisco:unified_communications_manager:10.5\(2\)su7:*:*:*:-:*:*:*
  • cpe:2.3:a:cisco:unified_communications_manager:10.5\(2\)su8:*:*:*:-:*:*:*
    cpe:2.3:a:cisco:unified_communications_manager:10.5\(2\)su8:*:*:*:-:*:*:*
  • cpe:2.3:a:cisco:unified_communications_manager:10.5\(2\)su9:*:*:*:-:*:*:*
    cpe:2.3:a:cisco:unified_communications_manager:10.5\(2\)su9:*:*:*:-:*:*:*
  • cpe:2.3:a:cisco:unified_communications_manager:10.5\(2\)su10:*:*:*:-:*:*:*
    cpe:2.3:a:cisco:unified_communications_manager:10.5\(2\)su10:*:*:*:-:*:*:*
  • cpe:2.3:a:cisco:unified_communications_manager:11.5\(1\):*:*:*:-:*:*:*
    cpe:2.3:a:cisco:unified_communications_manager:11.5\(1\):*:*:*:-:*:*:*
  • cpe:2.3:a:cisco:unified_communications_manager:11.5\(1\)su8:*:*:*:-:*:*:*
    cpe:2.3:a:cisco:unified_communications_manager:11.5\(1\)su8:*:*:*:-:*:*:*
  • cpe:2.3:a:cisco:unified_communications_manager:11.5\(1\)su9:*:*:*:-:*:*:*
    cpe:2.3:a:cisco:unified_communications_manager:11.5\(1\)su9:*:*:*:-:*:*:*
  • cpe:2.3:a:cisco:unified_communications_manager:12.0\(1\):*:*:*:-:*:*:*
    cpe:2.3:a:cisco:unified_communications_manager:12.0\(1\):*:*:*:-:*:*:*
  • cpe:2.3:a:cisco:unified_communications_manager:12.5\(1\):*:*:*:-:*:*:*
    cpe:2.3:a:cisco:unified_communications_manager:12.5\(1\):*:*:*:-:*:*:*
  • cpe:2.3:a:cisco:unified_communications_manager:-:*:*:*:session_management:*:*:*
    cpe:2.3:a:cisco:unified_communications_manager:-:*:*:*:session_management:*:*:*
  • cpe:2.3:a:cisco:unified_communications_manager:10.5\(2\):*:*:*:session_management:*:*:*
    cpe:2.3:a:cisco:unified_communications_manager:10.5\(2\):*:*:*:session_management:*:*:*
  • cpe:2.3:a:cisco:unified_communications_manager:10.5\(2\)su1:*:*:*:session_management:*:*:*
    cpe:2.3:a:cisco:unified_communications_manager:10.5\(2\)su1:*:*:*:session_management:*:*:*
  • cpe:2.3:a:cisco:unified_communications_manager:10.5\(2\)su2:*:*:*:session_management:*:*:*
    cpe:2.3:a:cisco:unified_communications_manager:10.5\(2\)su2:*:*:*:session_management:*:*:*
  • cpe:2.3:a:cisco:unified_communications_manager:10.5\(2\)su2a:*:*:*:session_management:*:*:*
    cpe:2.3:a:cisco:unified_communications_manager:10.5\(2\)su2a:*:*:*:session_management:*:*:*
  • cpe:2.3:a:cisco:unified_communications_manager:10.5\(2\)su3:*:*:*:session_management:*:*:*
    cpe:2.3:a:cisco:unified_communications_manager:10.5\(2\)su3:*:*:*:session_management:*:*:*
  • cpe:2.3:a:cisco:unified_communications_manager:10.5\(2\)su3a:*:*:*:session_management:*:*:*
    cpe:2.3:a:cisco:unified_communications_manager:10.5\(2\)su3a:*:*:*:session_management:*:*:*
  • cpe:2.3:a:cisco:unified_communications_manager:10.5\(2\)su4:*:*:*:session_management:*:*:*
    cpe:2.3:a:cisco:unified_communications_manager:10.5\(2\)su4:*:*:*:session_management:*:*:*
  • cpe:2.3:a:cisco:unified_communications_manager:10.5\(2\)su4a:*:*:*:session_management:*:*:*
    cpe:2.3:a:cisco:unified_communications_manager:10.5\(2\)su4a:*:*:*:session_management:*:*:*
  • cpe:2.3:a:cisco:unified_communications_manager:10.5\(2\)su6:*:*:*:session_management:*:*:*
    cpe:2.3:a:cisco:unified_communications_manager:10.5\(2\)su6:*:*:*:session_management:*:*:*
  • cpe:2.3:a:cisco:unified_communications_manager:10.5\(2\)su6a:*:*:*:session_management:*:*:*
    cpe:2.3:a:cisco:unified_communications_manager:10.5\(2\)su6a:*:*:*:session_management:*:*:*
  • cpe:2.3:a:cisco:unified_communications_manager:10.5\(2\)su7:*:*:*:session_management:*:*:*
    cpe:2.3:a:cisco:unified_communications_manager:10.5\(2\)su7:*:*:*:session_management:*:*:*
  • cpe:2.3:a:cisco:unified_communications_manager:10.5\(2\)su8:*:*:*:session_management:*:*:*
    cpe:2.3:a:cisco:unified_communications_manager:10.5\(2\)su8:*:*:*:session_management:*:*:*
  • cpe:2.3:a:cisco:unified_communications_manager:10.5\(2\)su9:*:*:*:session_management:*:*:*
    cpe:2.3:a:cisco:unified_communications_manager:10.5\(2\)su9:*:*:*:session_management:*:*:*
  • cpe:2.3:a:cisco:unified_communications_manager:10.5\(2\)su10:*:*:*:session_management:*:*:*
    cpe:2.3:a:cisco:unified_communications_manager:10.5\(2\)su10:*:*:*:session_management:*:*:*
  • cpe:2.3:a:cisco:unified_communications_manager:11.5\(1\):*:*:*:session_management:*:*:*
    cpe:2.3:a:cisco:unified_communications_manager:11.5\(1\):*:*:*:session_management:*:*:*
  • cpe:2.3:a:cisco:unified_communications_manager:11.5\(1\)su8:*:*:*:session_management:*:*:*
    cpe:2.3:a:cisco:unified_communications_manager:11.5\(1\)su8:*:*:*:session_management:*:*:*
  • cpe:2.3:a:cisco:unified_communications_manager:11.5\(1\)su9:*:*:*:session_management:*:*:*
    cpe:2.3:a:cisco:unified_communications_manager:11.5\(1\)su9:*:*:*:session_management:*:*:*
  • cpe:2.3:a:cisco:unified_communications_manager:12.0\(1\):*:*:*:session_management:*:*:*
    cpe:2.3:a:cisco:unified_communications_manager:12.0\(1\):*:*:*:session_management:*:*:*
  • cpe:2.3:a:cisco:unified_communications_manager:12.5:*:*:*:session_management:*:*:*
    cpe:2.3:a:cisco:unified_communications_manager:12.5:*:*:*:session_management:*:*:*
  • cpe:2.3:a:cisco:unified_communications_manager:12.5\(1\):*:*:*:session_management:*:*:*
    cpe:2.3:a:cisco:unified_communications_manager:12.5\(1\):*:*:*:session_management:*:*:*
  • cpe:2.3:a:cisco:unified_communications_manager:12.5\(1\)su4:*:*:*:session_management:*:*:*
    cpe:2.3:a:cisco:unified_communications_manager:12.5\(1\)su4:*:*:*:session_management:*:*:*
CVSS
Base: 6.8 (as of 14-05-2021 - 20:43)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW SINGLE
Impact
ConfidentialityIntegrityAvailability
NONE NONE COMPLETE
cvss-vector via4 AV:N/AC:L/Au:S/C:N/I:N/A:C
Last major update 14-05-2021 - 20:43
Published 06-05-2021 - 13:15
Last modified 14-05-2021 - 20:43
Back to Top