The sccp-protocol component in Cisco IP Communicator (CIPC) 7.0 up to and including 8.6 does not limit the rate of SCCP messages to Cisco Unified Communications Manager (CUCM), which allows remote malicious users to cause a denial of service via vectors that trigger (1) on hook and (2) off hook messages, as demonstrated by a Plantronics headset, aka Bug ID CSCti40315.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
cisco ip communicator 7.0 |
||
cisco ip communicator 7.0\\(1\\) |
||
cisco ip communicator 7.0\\(3\\) |
||
cisco ip communicator 7.0\\(2\\) |
||
cisco ip communicator 8.6 |
||
cisco ip communicator 7.0\\(6\\) |
||
cisco ip communicator 7.0\\(5\\) |
||
cisco ip communicator 7.0\\(4\\) |
Vulmon