« Volver al listado

CVE-2010-1570

Estado: ModificadaAlta (7.8)—

The computer telephony integration (CTI) server component in Cisco Unified Contact Center Express (UCCX) 7.0 before 7.0(1)SR4 and 7.0(2), 6.0 before 6.0(1)SR1, and 5.0 before 5.0(2)SR3 allows remote attackers to cause a denial of service (CTI server and Node Manager failure) via a malformed CTI message.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (3)

Cisco — Customer Response SolutionCisco — Unified Contact Center ExpressCisco — Unified IP Interactive Voice Response

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2010-1570",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 6.9,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@cisco.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2010-06-10T00:30:07.410",
  "references": [
    {
      "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b2f110.shtml",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/40684",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.securitytracker.com/id?1024081",
      "source": "psirt@cisco.com"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/59276",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b2f110.shtml",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/40684",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id?1024081",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/59276",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The computer telephony integration (CTI) server component in Cisco Unified Contact Center Express (UCCX) 7.0 before 7.0(1)SR4 and 7.0(2), 6.0 before 6.0(1)SR1, and 5.0 before 5.0(2)SR3 allows remote attackers to cause a denial of service (CTI server and Node Manager failure) via a malformed CTI message."
    },
    {
      "lang": "es",
      "value": "El componente computer telephony integration (CTI) server en Cisco Unified Contact Center Express (UCCX) v7.0 anterior v7.0(1)SR4 y v7.0(2), v6.0 anterior v6.0(1)SR1, y v5.0 anteior v5.0(2)SR3 permite a atacantes remotos causar una denegación de servicio (CTI server and Node Manager failure) a través de un mensaje CTI malformado. \r\n"
    }
  ],
  "lastModified": "2026-06-16T23:18:37.827",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:unified_contact_center_express:5.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "94802F97-66DB-4D44-84B3-C3A809D482BE"
            },
            {
              "criteria": "cpe:2.3:a:cisco:unified_contact_center_express:6.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "48B1E1B7-0552-4DF4-BFF5-2F23A2A3984D"
            },
            {
              "criteria": "cpe:2.3:a:cisco:unified_contact_center_express:7.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A1A17849-7F58-47C5-8A76-40C9FD67575E"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:customer_response_solution:5.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "490A758F-AB9B-4316-BB13-ED3AD42C08EC"
            },
            {
              "criteria": "cpe:2.3:a:cisco:customer_response_solution:6.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5B8DE417-5CF4-4622-90A4-56668E9AADDD"
            },
            {
              "criteria": "cpe:2.3:a:cisco:customer_response_solution:7.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "81B117ED-4D28-4A21-9025-59C22B9F4987"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:unified_ip_interactive_voice_response:5.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8D336E75-FDE5-45CF-B9EB-789353ADE92C"
            },
            {
              "criteria": "cpe:2.3:a:cisco:unified_ip_interactive_voice_response:6.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "87ED508C-552E-4149-AAC5-42F02B771961"
            },
            {
              "criteria": "cpe:2.3:a:cisco:unified_ip_interactive_voice_response:7.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D92FB838-53A8-46DA-8F43-9B2B63E3033E"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@cisco.com"
}