A vulnerability in an API endpoint of multiple Cisco Unified Communications Products could allow an unauthenticated, remote attacker to cause high CPU utilization, which could impact access to the web-based management interface and cause delays with call processing. This API is not used for device management and is unlikely to be used in normal operations of the device.
This vulnerability is due to improper API authentication and incomplete validation of the API request. An attacker could exploit this vulnerability by sending a crafted HTTP request to a specific API on the device. A successful exploit could allow the attacker to cause a denial of service (DoS) condition due to high CPU utilization, which could negatively impact user traffic and management access. When the attack stops, the device will recover without manual intervention.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Cisco Emergency Responder
Vendor
Cisco
Product
Cisco Emergency Responder
Platforms
Unknown
Default status
Unknown
Cisco Emergency Responder · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
12.5(1)SU7
affected
Unavailable
Unavailable
Unavailable
None listed
14
affected
Unavailable
Unavailable
Unavailable
None listed
14SU3
affected
Unavailable
Unavailable
Unavailable
None listed
Cisco Unity Connection
Vendor
Cisco
Product
Cisco Unity Connection
Platforms
Unknown
Default status
Unknown
Cisco Unity Connection · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
14SU3
affected
Unavailable
Unavailable
Unavailable
None listed
Cisco Unified Communications Manager
Vendor
Cisco
Product
Cisco Unified Communications Manager
Platforms
Unknown
Default status
Unknown
Cisco Unified Communications Manager · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
12.5(1)SU7
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)SU7a
affected
Unavailable
Unavailable
Unavailable
None listed
14SU3
affected
Unavailable
Unavailable
Unavailable
None listed
Cisco Unified Communications Manager IM and Presence Service
Vendor
Cisco
Product
Cisco Unified Communications Manager IM and Presence Service
Platforms
Unknown
Default status
Unknown
Cisco Unified Communications Manager IM and Presence Service · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
12.5(1)SU7
affected
Unavailable
Unavailable
Unavailable
None listed
14SU3
affected
Unavailable
Unavailable
Unavailable
None listed
Cisco Prime Collaboration Deployment
Vendor
Cisco
Product
Cisco Prime Collaboration Deployment
Platforms
Unknown
Default status
Unknown
Cisco Prime Collaboration Deployment · Scoped product and version facts