Lucene search

K
cveCiscoCVE-2013-3418
HistoryOct 03, 2022 - 4:14 p.m.

CVE-2013-3418

2022-10-0316:14:45
CWE-399
cisco
web.nvd.nist.gov
26
cisco
unified communications
domain manager
memory allocation
vulnerability
denial of service
remote authentication
bug id cscud22922

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

45.4%

Cisco Unified Communications Domain Manager does not properly allocate memory for GET and POST requests, which allows remote authenticated users to cause a denial of service (memory consumption and process crash) via crafted requests to the management interface, aka Bug ID CSCud22922.

Affected configurations

Nvd
Node
ciscounified_communications_domain_managerMatch-
VendorProductVersionCPE
ciscounified_communications_domain_manager-cpe:/a:cisco:unified_communications_domain_manager:-:::

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

45.4%

Related for CVE-2013-3418