- Description
- Cisco IOS 12.1YD, 12.2T, 12.3 and 12.3T, when configured for the IOS Telephony Service (ITS), CallManager Express (CME) or Survivable Remote Site Telephony (SRST), allows remote attackers to cause a denial of service (device reboot) via a malformed packet to the SCCP port.
- Source
- cve@mitre.org
- NVD status
- Modified
CVSS 2.0
- Type
- Primary
- Base score
- 5
- Impact score
- 2.9
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:N/I:N/A:P
- Hype score
- Not currently trending
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ios:12.1yd:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BC38BD6C-9823-4D2A-8BE2-60AABE3C4932"
},
{
"criteria": "cpe:2.3:o:cisco:ios:12.2t:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "84900BB3-B49F-448A-9E04-FE423FBCCC4F"
},
{
"criteria": "cpe:2.3:o:cisco:ios:12.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0668C45B-9D25-424B-B876-C1721BFFE5DA"
},
{
"criteria": "cpe:2.3:o:cisco:ios:12.3t:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C0C3B413-76F7-413B-A51F-29834F9DE722"
}
],
"operator": "OR"
}
]
}
]