Denial of Service Vulnerability in Cisco Unified Customer Voice Portal
CVE-2018-0086

8.6HIGH

Key Information:

Vendor
Cisco
Status
Cisco Unified Customer Voice Portal
Vendor
CVE Published:
18 January 2018

Summary

A vulnerability exists in Cisco Unified Customer Voice Portal that may allow an unauthenticated remote attacker to cause a service disruption. This occurs when the device processes malformed SIP INVITE traffic during interaction with the Cisco Virtualized Voice Browser. An attacker could exploit this vulnerability by sending specially crafted SIP INVITE messages to the affected appliance, potentially leading to a denial of service and affecting service availability.

Affected Version(s)

Cisco Unified Customer Voice Portal Cisco Unified Customer Voice Portal

References

http://www.securitytracker.com/id/1040220
vdb-entryx_refsource_SECTRACK
http://www.securityfocus.com/bid/102745
vdb-entryx_refsource_BID
https://tools.cisco.com/security/center/content/CiscoSecu...
x_refsource_CONFIRM

CVSS V3.1

Score:
8.6
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.