CVEvulnerability
CVE-2012-3949
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2012-09-27
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:N/A:C
- Weaknesses
- CWE-20
Description
The SIP implementation in Cisco Unified Communications Manager (CUCM) 6.x and 7.x before 7.1(5b)su5, 8.x before 8.5(1)su4, and 8.6 before 8.6(2a)su1; Cisco IOS 12.2 through 12.4 and 15.0 through 15.2; and Cisco IOS XE 3.3.xSG before 3.3.1SG, 3.4.xS, and 3.5.xS allows remote attackers to cause a denial of service (service crash or device reload) via a crafted SIP message containing an SDP session description, aka Bug IDs CSCtw66721, CSCtj33003, and CSCtw84664.
Affected configurations
• cisco unified communications manager 6.0\(1a\)
• cisco unified communications manager 6.0\(1b\)
• cisco unified communications manager 6.1\(1\)
• cisco unified communications manager 6.1\(1a\)
• cisco unified communications manager 6.1\(1b\)
• cisco unified communications manager 6.1\(2\)
• cisco unified communications manager 6.1\(3\)
• cisco unified communications manager 6.1\(3a\)
• cisco unified communications manager 6.1\(3b\)
• cisco unified communications manager 6.1\(4\)
• cisco unified communications manager 6.1\(4a\)
• cisco unified communications manager 6.1\(4b\)
• cisco unified communications manager 6.1\(5\)
• cisco unified communications manager 7.1\(1\)
• cisco unified communications manager 7.1\(2\)
• cisco unified communications manager 7.1\(2a\)
• cisco unified communications manager 7.1\(2b\)
• cisco unified communications manager 7.1\(3\)
• cisco unified communications manager 7.1\(3a\)
• cisco unified communications manager 7.1\(3b\)
• cisco unified communications manager 7.1\(5\)
• cisco unified communications manager 7.1\(5a\)
• cisco unified communications manager 7.1\(5b\)
• cisco unified communications manager 7.1\(5b\)su1
• cisco unified communications manager 7.1\(5b\)su1a
• cisco unified communications manager 7.1\(5b\)su2
• cisco unified communications manager 7.1\(5b\)su3
• cisco unified communications manager 7.1\(5b\)su4
• cisco unified communications manager 8.0
• cisco unified communications manager 8.0\(1\)
• cisco unified communications manager 8.0\(2\)
• cisco unified communications manager 8.0\(2a\)
• cisco unified communications manager 8.0\(2b\)
• cisco unified communications manager 8.0\(2c\)
• cisco unified communications manager 8.0\(3\)
• cisco unified communications manager 8.0\(3a\)
• cisco unified communications manager 8.5\(1\)su1
• cisco unified communications manager 8.5\(1\)su2
• cisco unified communications manager 8.5\(1\)su3
• cisco ios 12.2
• cisco ios 12.2b
• cisco ios 12.2bc
• cisco ios 12.2bw
• cisco ios 12.2bx
• cisco ios 12.2by
• cisco ios 12.2bz
• cisco ios 12.2ca
• cisco ios 12.2cx
• cisco ios 12.2cy
• cisco ios 12.2cz
• cisco ios 12.2da
• cisco ios 12.2dd
• cisco ios 12.2dx
• cisco ios 12.2ew
• cisco ios 12.2ewa
• cisco ios 12.2ex
• cisco ios 12.2ey
• cisco ios 12.2ez
• cisco ios 12.2fx
• cisco ios 12.2fy
… and 200 more
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://osvdb.org/85816 Broken Link
- http://secunia.com/advisories/50774 Not Applicable
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120926-cucm Vendor Advisory
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120926-sip Vendor Advisory
- http://www.securityfocus.com/bid/55697 Third Party Advisory, VDB Entry
- http://osvdb.org/85816 Broken Link
- http://secunia.com/advisories/50774 Not Applicable
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120926-cucm Vendor Advisory
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120926-sip Vendor Advisory
- http://www.securityfocus.com/bid/55697 Third Party Advisory, VDB Entry