CVE-2012-3949

Cisco Unified Communications Manager DoS via Crafted SIP Message

Title source: llm
STIX 2.1

Description

The SIP implementation in Cisco Unified Communications Manager (CUCM) 6.x and 7.x before 7.1(5b)su5, 8.x before 8.5(1)su4, and 8.6 before 8.6(2a)su1; Cisco IOS 12.2 through 12.4 and 15.0 through 15.2; and Cisco IOS XE 3.3.xSG before 3.3.1SG, 3.4.xS, and 3.5.xS allows remote attackers to cause a denial of service (service crash or device reload) via a crafted SIP message containing an SDP session description, aka Bug IDs CSCtw66721, CSCtj33003, and CSCtw84664.

References (5)

Core 5
Core References
Not Applicable third-party-advisory x_refsource_secunia
http://secunia.com/advisories/50774
Broken Link vdb-entry x_refsource_osvdb
http://osvdb.org/85816
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/55697

Scores

EPSS 0.0320
EPSS Percentile 86.6%

Details

CWE
CWE-20
Status published
Products (50)
cisco/ios 12.2
cisco/ios 12.2b
cisco/ios 12.2bc
cisco/ios 12.2bw
cisco/ios 12.2bx
cisco/ios 12.2by
cisco/ios 12.2bz
cisco/ios 12.2ca
cisco/ios 12.2cx
cisco/ios 12.2cy
... and 40 more
Published Sep 27, 2012
Tracked Since Feb 18, 2026