CVE-2013-1137

2013-02-2721:55:04

CWE-119

cisco

web.nvd.nist.gov

cisco

unified presence server

cups

cve-2013-1137

denial of service

cpu consumption

sip

tcp port

bug id

cscua89930

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.8

Confidence

High

EPSS

0.002

Percentile

53.2%

JSON

Cisco Unified Presence Server (CUPS) 8.6, 9.0, and 9.1 before 9.1.1 allows remote attackers to cause a denial of service (CPU consumption) via crafted packets to the SIP TCP port, aka Bug ID CSCua89930.

Affected configurations

Nvd

Node

ciscounified_presence_serverMatch8.6

ciscounified_presence_serverMatch9.0

ciscounified_presence_serverMatch9.1

VendorProductVersionCPE
ciscounified_presence_server8.6cpe:2.3:a:cisco:unified_presence_server:8.6:*:*:*:*:*:*:*
ciscounified_presence_server9.0cpe:2.3:a:cisco:unified_presence_server:9.0:*:*:*:*:*:*:*
ciscounified_presence_server9.1cpe:2.3:a:cisco:unified_presence_server:9.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	unified_presence_server	8.6	cpe:2.3:a:cisco:unified_presence_server:8.6:::::::*
cisco	unified_presence_server	9.0	cpe:2.3:a:cisco:unified_presence_server:9.0:::::::*
cisco	unified_presence_server	9.1	cpe:2.3:a:cisco:unified_presence_server:9.1:::::::*