« Volver al listado

CVE-2012-0361

Estado: ModificadaMedia (5)—

The sccp-protocol component in Cisco IP Communicator (CIPC) 7.0 through 8.6 does not limit the rate of SCCP messages to Cisco Unified Communications Manager (CUCM), which allows remote attackers to cause a denial of service via vectors that trigger (1) on hook and (2) off hook messages, as demonstrated by a Plantronics headset, aka Bug ID CSCti40315.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Cisco — IP Communicator

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2012-0361",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@cisco.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2012-05-02T10:09:22.207",
  "references": [
    {
      "url": "http://www.cisco.com/en/US/docs/voice_ip_comm/cipc/8_5/english/release_notes/CIPC8x_RN.html",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.securitytracker.com/id?1027013",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.cisco.com/en/US/docs/voice_ip_comm/cipc/8_5/english/release_notes/CIPC8x_RN.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id?1027013",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The sccp-protocol component in Cisco IP Communicator (CIPC) 7.0 through 8.6 does not limit the rate of SCCP messages to Cisco Unified Communications Manager (CUCM), which allows remote attackers to cause a denial of service via vectors that trigger (1) on hook and (2) off hook messages, as demonstrated by a Plantronics headset, aka Bug ID CSCti40315."
    },
    {
      "lang": "es",
      "value": "El componente de protocolo SCCP de Cisco IP Communicator (CIPC) v7.0 a v8.6 no limita la velocidad de mensajes SCCP de Cisco Unified Communications Manager (CUCM), lo que permite a atacantes remotos provocar una denegación de servicio a través de vectores que se disparan mensajes gancho de (1) dentro o (2) fuera, como lo demuestra un auricular de Plantronics, también conocido como Bug ID CSCti40315."
    }
  ],
  "lastModified": "2026-06-16T23:37:09.453",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:ip_communicator:7.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "45865E7D-5DC1-4B59-BAA9-FE8BF09A43F1"
            },
            {
              "criteria": "cpe:2.3:a:cisco:ip_communicator:7.0\\(1\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "00BD52A1-733E-4302-BEBC-45B7C07B78A9"
            },
            {
              "criteria": "cpe:2.3:a:cisco:ip_communicator:7.0\\(2\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8953DA8D-FA38-4465-A39B-CD656D30ED93"
            },
            {
              "criteria": "cpe:2.3:a:cisco:ip_communicator:7.0\\(3\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "965F56AD-6626-48EA-82A3-E5D5FA513027"
            },
            {
              "criteria": "cpe:2.3:a:cisco:ip_communicator:7.0\\(4\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C335CE3A-1A41-4298-96ED-19E2BACBDAB3"
            },
            {
              "criteria": "cpe:2.3:a:cisco:ip_communicator:7.0\\(5\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1CBDABB9-AABD-40E2-B5A7-DBB4CBA14100"
            },
            {
              "criteria": "cpe:2.3:a:cisco:ip_communicator:7.0\\(6\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "43C09184-F842-4F07-9A9E-6AB0A5869709"
            },
            {
              "criteria": "cpe:2.3:a:cisco:ip_communicator:8.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "090CD73E-AEE1-480F-9D57-0EBD8E599354"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@cisco.com"
}