CVE-2010-1570

The computer telephony integration (CTI) server component in Cisco Unified Contact Center Express (UCCX) 7.0 before 7.0(1)SR4 and 7.0(2), 6.0 before 6.0(1)SR1, and 5.0 before 5.0(2)SR3 allows remote attackers to cause a denial of service (CTI server and Node Manager failure) via a malformed CTI message.

Score

CVSS 2.0 7.8 High

Status

Modified - psirt@cisco.com

Published

2010-06-10

Last modified

2024-08-07

Affected products

• Customer Response Solution (Cisco)
• Unified Contact Center Express (Cisco)
• Unified Ip Interactive Voice Response (Cisco)

References

• http://www.cisco.com/en/US/products/products_security_advisory09186a0080b2f110.shtml
• http://www.securityfocus.com/bid/40684
• http://www.securitytracker.com/id?1024081
• https://exchange.xforce.ibmcloud.com/vulnerabilities/59276