CVEvulnerability

CVE-2012-3949

7.8 HIGH Published 2012-09-27 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-09-27
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:N/A:C
Weaknesses
CWE-20

Description

The SIP implementation in Cisco Unified Communications Manager (CUCM) 6.x and 7.x before 7.1(5b)su5, 8.x before 8.5(1)su4, and 8.6 before 8.6(2a)su1; Cisco IOS 12.2 through 12.4 and 15.0 through 15.2; and Cisco IOS XE 3.3.xSG before 3.3.1SG, 3.4.xS, and 3.5.xS allows remote attackers to cause a denial of service (service crash or device reload) via a crafted SIP message containing an SDP session description, aka Bug IDs CSCtw66721, CSCtj33003, and CSCtw84664.

Affected configurations

• cisco unified communications manager 6.0\(1a\) • cisco unified communications manager 6.0\(1b\) • cisco unified communications manager 6.1\(1\) • cisco unified communications manager 6.1\(1a\) • cisco unified communications manager 6.1\(1b\) • cisco unified communications manager 6.1\(2\) • cisco unified communications manager 6.1\(3\) • cisco unified communications manager 6.1\(3a\) • cisco unified communications manager 6.1\(3b\) • cisco unified communications manager 6.1\(4\) • cisco unified communications manager 6.1\(4a\) • cisco unified communications manager 6.1\(4b\) • cisco unified communications manager 6.1\(5\) • cisco unified communications manager 7.1\(1\) • cisco unified communications manager 7.1\(2\) • cisco unified communications manager 7.1\(2a\) • cisco unified communications manager 7.1\(2b\) • cisco unified communications manager 7.1\(3\) • cisco unified communications manager 7.1\(3a\) • cisco unified communications manager 7.1\(3b\) • cisco unified communications manager 7.1\(5\) • cisco unified communications manager 7.1\(5a\) • cisco unified communications manager 7.1\(5b\) • cisco unified communications manager 7.1\(5b\)su1 • cisco unified communications manager 7.1\(5b\)su1a • cisco unified communications manager 7.1\(5b\)su2 • cisco unified communications manager 7.1\(5b\)su3 • cisco unified communications manager 7.1\(5b\)su4 • cisco unified communications manager 8.0 • cisco unified communications manager 8.0\(1\) • cisco unified communications manager 8.0\(2\) • cisco unified communications manager 8.0\(2a\) • cisco unified communications manager 8.0\(2b\) • cisco unified communications manager 8.0\(2c\) • cisco unified communications manager 8.0\(3\) • cisco unified communications manager 8.0\(3a\) • cisco unified communications manager 8.5\(1\)su1 • cisco unified communications manager 8.5\(1\)su2 • cisco unified communications manager 8.5\(1\)su3 • cisco ios 12.2 • cisco ios 12.2b • cisco ios 12.2bc • cisco ios 12.2bw • cisco ios 12.2bx • cisco ios 12.2by • cisco ios 12.2bz • cisco ios 12.2ca • cisco ios 12.2cx • cisco ios 12.2cy • cisco ios 12.2cz • cisco ios 12.2da • cisco ios 12.2dd • cisco ios 12.2dx • cisco ios 12.2ew • cisco ios 12.2ewa • cisco ios 12.2ex • cisco ios 12.2ey • cisco ios 12.2ez • cisco ios 12.2fx • cisco ios 12.2fy … and 200 more

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References