CVE-2010-2835

Cisco IOS 12.2-12.4 and 15.0-15.1 - Denial of Service via SIP REFER Request

Title source: llm
STIX 2.1

Description

Cisco IOS 12.2 through 12.4 and 15.0 through 15.1, Cisco IOS XE 2.5.x and 2.6.x before 2.6.1, and Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5), 7.0 before 7.0(2a)su3, 7.1su before 7.1(3b)su2, 7.1 before 7.1(5), and 8.0 before 8.0(1) allow remote attackers to cause a denial of service (device reload or voice-services outage) via a SIP REFER request with an invalid Refer-To header, aka Bug IDs CSCta20040 and CSCta31358.

References (2)

Core 2
Core References
Patch, Vendor Advisory vendor-advisory x_refsource_cisco
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4a313.shtml
Patch, Vendor Advisory vendor-advisory x_refsource_cisco
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4a30f.shtml

Scores

EPSS 0.0179
EPSS Percentile 76.0%

Details

Status published
Products (50)
cisco/ios 12.1
cisco/ios 12.1t
cisco/ios 12.1xi
cisco/ios 12.1xj
cisco/ios 12.1xl
cisco/ios 12.1xm
cisco/ios 12.1xp
cisco/ios 12.1xq
cisco/ios 12.1xr
cisco/ios 12.1xs
... and 40 more
Published Sep 23, 2010
Tracked Since Feb 18, 2026