CVE

Id
70633  
CVE No.
CVE-2014-3337  
Status
Candidate  
Description
The SIP implementation in Cisco Unified Communications Manager (CM) 8.6(.2) and earlier allows remote authenticated users to cause a denial of service (process crash) via a crafted SIP message that is not properly handled during processing of an XML document, aka Bug ID CSCtq76428.  
Phase
Assigned (20140507)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
671501 70633 CVE-2014-3337 CONFIRM:http://tools.cisco.com/security/center/viewAlert.x?alertId=35257  View
671502 70633 CVE-2014-3337 CISCO:20140811 Cisco Unified Communications Manager SIP Subsystem Vulnerability  View
671503 70633 CVE-2014-3337 URL:http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3337  View
671504 70633 CVE-2014-3337 BID:69177  View
671505 70633 CVE-2014-3337 URL:http://www.securityfocus.com/bid/69177  View
671506 70633 CVE-2014-3337 SECTRACK:1030709  View
671507 70633 CVE-2014-3337 URL:http://www.securitytracker.com/id/1030709  View
671508 70633 CVE-2014-3337 SECUNIA:60088  View
671509 70633 CVE-2014-3337 URL:http://secunia.com/advisories/60088  View
671510 70633 CVE-2014-3337 XF:cucm-cve20143337-dos(95245)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
15114 JVNDB-2014-003989 Cisco Transport Gateway for Smart Call Home の Web フレームワークにおける製品を変更される脆弱性 Cisco Transport Gateway for Smart Call Home (別名 TG-SCH または Transport Gateway Installation Software) の Web フレームワークは、管理 Web ページに対して適切に認証をチェックしないため、製品を変更される脆弱性が存在します。 CVE-2014-3345 70633 5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003989.html  View