CVE-2010-0585

Cisco IOS 12.1-12.4 - Denial of Service via Malformed SCCP Message

Title source: llm
STIX 2.1

Description

Cisco IOS 12.1 through 12.4, when Cisco Unified Communications Manager Express (CME) or Cisco Unified Survivable Remote Site Telephony (SRST) is enabled, allows remote attackers to cause a denial of service (device reload) via a malformed Skinny Client Control Protocol (SCCP) message, aka Bug ID CSCsz48614, the "SCCP Packet Processing Denial of Service Vulnerability."

References (3)

Core 3
Core References
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/39069
Patch, Vendor Advisory x_refsource_confirm
http://tools.cisco.com/security/center/viewAlert.x?alertId=20069
Patch, Vendor Advisory vendor-advisory x_refsource_cisco
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b20f33.shtml

Scores

EPSS 0.0162
EPSS Percentile 73.5%

Details

Status published
Products (50)
cisco/ios 12.1yd
cisco/ios 12.1ye
cisco/ios 12.1yi
cisco/ios 12.2b
cisco/ios 12.2bx
cisco/ios 12.2by
cisco/ios 12.2mc
cisco/ios 12.2t
cisco/ios 12.2tpc
cisco/ios 12.2xb
... and 40 more
Published Mar 25, 2010
Tracked Since Feb 18, 2026