CVE-2013-1220
high
CVSS v3
—
CVSS v2
7.8
VIR risk
7.8
Description
The CallServer component in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 allows remote attackers to cause a denial of service (call-acceptance outage) via malformed SIP INVITE messages, aka Bug ID CSCua65148.
Predictions
Exploit likelihood
20%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: psirt@cisco.com — http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130508-cvp
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| cisco | unified_customer_voice_portal | {"endIncluding":"9.0\\(1\\)"} | |
| cisco | unified_customer_voice_portal | 3.0 | |
| cisco | unified_customer_voice_portal | 3.6\(10\) | |
| cisco | unified_customer_voice_portal | 4.0 | |
| cisco | unified_customer_voice_portal | 4.0\(2\) | |
| cisco | unified_customer_voice_portal | 4.1 | |
| cisco | unified_customer_voice_portal | 7.0 | |
| cisco | unified_customer_voice_portal | 7.0\(2\) | |
| cisco | unified_customer_voice_portal | 8.0\(1\) | |
| cisco | unified_customer_voice_portal | 8.5\(1\) | |
| cisco | unified_customer_voice_portal | 9.0 | |
References
Verify integrity in audit chain (admin only). AS-IS.