Cisco Unified Presence Server Denial of Service Vulnerability

2013-02-2716:00:00

tools.cisco.com

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

EPSS

0.002

Percentile

53.2%

JSON

Cisco Unified Presence Server (CUPS) contains a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. Cisco has released software updates that address this vulnerability. A workaround is available to mitigate this vulnerability. This advisory is available at the following link:

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130227-cups[“https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130227-cups”]

Affected configurations

Vulners

Node

ciscounified_presence_serverMatchany

ciscounified_communications_manager_im_and_presence_serviceMatchany

ciscounified_presence_serverMatchany

ciscounified_communications_manager_im_and_presence_serviceMatchany

VendorProductVersionCPE
ciscounified_presence_serveranycpe:2.3:a:cisco:unified_presence_server:any:*:*:*:*:*:*:*
ciscounified_communications_manager_im_and_presence_serviceanycpe:2.3:a:cisco:unified_communications_manager_im_and_presence_service:any:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	unified_presence_server	any	cpe:2.3:a:cisco:unified_presence_server:any:::::::*
cisco	unified_communications_manager_im_and_presence_service	any	cpe:2.3:a:cisco:unified_communications_manager_im_and_presence_service:any:::::::*