CVE-2009-5040

Cisco IOS < 15.0(1)XA - Authenticated Denial of Service via SNR Number Change Menu

Title source: llm
STIX 2.1

Description

CallManager Express (CME) on Cisco IOS before 15.0(1)XA allows remote authenticated users to cause a denial of service (device crash) by using an extension mobility (EM) phone to interact with the menu for SNR number changes, aka Bug ID CSCta63555.

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/64681
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/45765

Scores

EPSS 0.0201
EPSS Percentile 78.8%

Details

CWE
CWE-399
Status published
Products (50)
cisco/ios 4.1
cisco/ios 4.1.1
cisco/ios 4.1.2
cisco/ios 7.2\(2\)22
cisco/ios 8.2
cisco/ios 8.3
cisco/ios 9.0
cisco/ios 9.1
cisco/ios 9.14
cisco/ios 10.0
... and 40 more
Published Jan 07, 2011
Tracked Since Feb 18, 2026