A vulnerability in an API endpoint of multiple Cisco Unified Communications Products could allow an unauthenticated, remote attacker to cause high CPU utilization, which could impact access to the web-based management interface and cause delays with call processing. This API is n
A vulnerability in an API endpoint of multiple Cisco Unified Communications Products could allow an unauthenticated, remote attacker to cause high CPU utilization, which could impact access to the web-based management interface and cause delays with call processing. This API is not used for device management and is unlikely to be used in normal operations of the device. This vulnerability is due…
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Cisco Emergency Responder | 12.5(1)SU7, 14, 14SU3 |
| Cisco | Cisco Unity Connection | 14SU3 |
| Cisco | Cisco Unified Communications Manager | 12.5(1)SU7, 12.5(1)SU7a, 14SU3 |
| Cisco | Cisco Unified Communications Manager IM and Presence Service | 12.5(1)SU7, 14SU3 |
| Cisco | Cisco Prime Collaboration Deployment | 14SU3 |
Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.
For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.
Ask SARA in chat to draft a starting detection for this CVE in your stack of choice.
No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.