ID CVE-2010-1570
Summary The computer telephony integration (CTI) server component in Cisco Unified Contact Center Express (UCCX) 7.0 before 7.0(1)SR4 and 7.0(2), 6.0 before 6.0(1)SR1, and 5.0 before 5.0(2)SR3 allows remote attackers to cause a denial of service (CTI server and Node Manager failure) via a malformed CTI message.
References
Vulnerable Configurations
  • cpe:2.3:a:cisco:unified_contact_center_express:5.0:*:*:*:*:*:*:*
    cpe:2.3:a:cisco:unified_contact_center_express:5.0:*:*:*:*:*:*:*
  • cpe:2.3:a:cisco:unified_contact_center_express:6.0:*:*:*:*:*:*:*
    cpe:2.3:a:cisco:unified_contact_center_express:6.0:*:*:*:*:*:*:*
  • cpe:2.3:a:cisco:unified_contact_center_express:7.0:*:*:*:*:*:*:*
    cpe:2.3:a:cisco:unified_contact_center_express:7.0:*:*:*:*:*:*:*
  • cpe:2.3:a:cisco:customer_response_solution:5.0:*:*:*:*:*:*:*
    cpe:2.3:a:cisco:customer_response_solution:5.0:*:*:*:*:*:*:*
  • cpe:2.3:a:cisco:customer_response_solution:6.0:*:*:*:*:*:*:*
    cpe:2.3:a:cisco:customer_response_solution:6.0:*:*:*:*:*:*:*
  • cpe:2.3:a:cisco:customer_response_solution:7.0:*:*:*:*:*:*:*
    cpe:2.3:a:cisco:customer_response_solution:7.0:*:*:*:*:*:*:*
  • cpe:2.3:a:cisco:unified_ip_interactive_voice_response:5.0:*:*:*:*:*:*:*
    cpe:2.3:a:cisco:unified_ip_interactive_voice_response:5.0:*:*:*:*:*:*:*
  • cpe:2.3:a:cisco:unified_ip_interactive_voice_response:6.0:*:*:*:*:*:*:*
    cpe:2.3:a:cisco:unified_ip_interactive_voice_response:6.0:*:*:*:*:*:*:*
  • cpe:2.3:a:cisco:unified_ip_interactive_voice_response:7.0:*:*:*:*:*:*:*
    cpe:2.3:a:cisco:unified_ip_interactive_voice_response:7.0:*:*:*:*:*:*:*
CVSS
Base: 7.8 (as of 17-08-2017 - 01:32)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE COMPLETE
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:C
refmap via4
bid 40684
cisco 20100609 Vulnerabilities in Cisco Unified Contact Center Express
sectrack 1024081
xf cisco-unified-ccx-cti-dos(59276)
Last major update 17-08-2017 - 01:32
Published 10-06-2010 - 00:30
Last modified 17-08-2017 - 01:32
Back to Top