NetSight
IP …
high7.8

CVE-2012-3949

The SIP implementation in Cisco Unified Communications Manager (CUCM) 6.x and 7.x before 7.1(5b)su5, 8.x before 8.5(1)su4, and 8.6 before 8.6(2a)su1; Cisco IOS…

Impact

The SIP implementation in Cisco Unified Communications Manager (CUCM) 6.x and 7.x before 7.1(5b)su5, 8.x before 8.5(1)su4, and 8.6 before 8.6(2a)su1; Cisco IOS 12.2 through 12.4 and 15.0 through 15.2; and Cisco IOS XE 3.3.xSG before 3.3.1SG, 3.4.xS, and 3.5.xS allows remote attackers to cause a denial of service (service crash or device reload) via a crafted SIP message containing an SDP session description, aka Bug IDs CSCtw66721, CSCtj33003, and CSCtw84664.

Affected products

VendorProductAffected versions
CiscoUnified Communications Manager
Versions 6.0\(1a\), 6.0\(1b\), 6.1\(1\), 6.1\(1a\), 6.1\(1b\), 6.1\(2\)
CiscoIos
Versions 12.2, 12.2b, 12.2bc, 12.2bw, 12.2bx, 12.2by
CiscoIos Xe
Versions 3.3.0sg, 3.3.1s, 3.3.1sg, 3.4.0as, 3.4.0s, 3.4.1s

Weakness classification

CWE-20

References