HIGH
Cisco IOS 12.1 through 12.4, when Cisco Unified Communications Manager Express (CME) or Cisco Unified Survivable Remote Site Telephony (SRST) is enabled, allows remote attackers to cause a denial of service (device reload) via a malformed Skinny Client Control Protocol (SCCP) message, aka Bug ID CSCsz49741, the "SCCP Request Handling Denial of Service Vulnerability."
Published Mar 25, 2010
7.8
HIGHCVSS 2.0
EPSS 2.60%
Description
Cisco IOS 12.1 through 12.4, when Cisco Unified Communications Manager Express (CME) or Cisco Unified Survivable Remote Site Telephony (SRST) is enabled, allows remote attackers to cause a denial of service (device reload) via a malformed Skinny Client Control Protocol (SCCP) message, aka Bug ID CSCsz49741, the "SCCP Request Handling Denial of Service Vulnerability."
Affected products
No data.
OR
- 12.1yd
- 12.1ye
- 12.1yi
- 12.2b
- 12.2bx
- 12.2by
- 12.2mc
- 12.2t
- 12.2tpc
- 12.2xb
- 12.2xg
- 12.2xm
- 12.2xt
- 12.2xu
- 12.2xw
- 12.2ya
- 12.2yb
- 12.2yc
- 12.2yd
- 12.2yh
- 12.2yj
- 12.2yl
- 12.2ym
- 12.2yn
- 12.2yt
- 12.2yu
- 12.2yv
- 12.2yw
- 12.2yy
- 12.2zb
- 12.2zc
- 12.2zd
- 12.2ze
- 12.2zf
- 12.2zh
- 12.2zj
- 12.2zl
- 12.2zp
- 12.3
- 12.3b
- 12.3jk
- 12.3t
- 12.3tpc
- 12.3xa
- 12.3xb
- 12.3xc
- 12.3xd
- 12.3xe
- 12.3xf
- 12.3xg
- 12.3xi
- 12.3xj
- 12.3xk
- 12.3xl
- 12.3xq
- 12.3xr
- 12.3xu
- 12.3xw
- 12.3xx
- 12.3xy
- 12.3xz
- 12.3yf
- 12.3yg
- 12.3yk
- 12.3ym
- 12.3yq
- 12.3ys
- 12.3yt
- 12.3yu
- 12.3yx
- 12.3yz
- 12.3za
- 12.4
- 12.4gc
- 12.4mr
- 12.4t
- 12.4xa
- 12.4xb
- 12.4xc
- 12.4xd
- 12.4xe
- 12.4xg
- 12.4xj
- 12.4xl
- 12.4xm
- 12.4xp
- 12.4xt
- 12.4xv
- 12.4xw
- 12.4xy
- 12.4xz
- 12.4ya
- 12.4yb
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (0)
No CWE recorded.
References (6)
- http://osvdb.org/63177 vdb-entryx_refsource_OSVDB
- http://secunia.com/advisories/39069 third-party-advisoryx_refsource_SECUNIA
- http://tools.cisco.com/security/center/viewAlert.x?alertId=20070 x_refsource_CONFIRMPatchVendor Advisory
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b20f33.shtml vendor-advisoryx_refsource_CISCOPatchVendor Advisory
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2010-0617 Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6625 vdb-entrysignaturex_refsource_OVAL
| Link | Providers | Tags |
|---|---|---|
| http://osvdb.org/63177 | vdb-entryx_refsource_OSVDB | |
| http://secunia.com/advisories/39069 | third-party-advisoryx_refsource_SECUNIA | |
| http://tools.cisco.com/security/center/viewAlert.x?alertId=20070 | x_refsource_CONFIRMPatchVendor Advisory | |
| http://www.cisco.com/en/US/products/products_security_advisory09186a0080b20f33.shtml | vendor-advisoryx_refsource_CISCOPatchVendor Advisory | |
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2010-0617 | Advisory | |
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6625 | vdb-entrysignaturex_refsource_OVAL |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner cisco
Published Mar 25, 2010
Updated Aug 7, 2024
Reserved Feb 10, 2010
Link CVE-2010-0586
CISA Vulnrichment
Updated n/a
ENISA EUVD
EUVD-2010-0617 Assigner cisco
Published Mar 25, 2010
Updated Aug 7, 2024
Exploited since n/a
Link EUVD-2010-0617