Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A vulnerability in the application server of the Cisco Unified Customer Voice Portal (CVP) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on the affected device. The vulnerability is due to malformed SIP INVITE traffic received on the CVP during communications with the Cisco Virtualized Voice Browser (VVB). An attacker could exploit this vulnerability by sending malformed SIP INVITE traffic to the targeted appliance. An exploit could allow the attacker to impact the availability of services and data on the device, causing a DoS condition. This vulnerability affects Cisco Unified CVP running any software release prior to 11.6(1). Cisco Bug IDs: CSCve85840.
CVSS Information
N/A
Vulnerability Type
未加控制的资源消耗(资源穷尽)
Vulnerability Title
Cisco Unified Customer Voice Portal application server 安全漏洞
Vulnerability Description
Cisco Unified Customer Voice Portal（CVP）是美国思科（Cisco）公司的一套用于提供语音和视频自助服务的统一通信系统。application server是其中的一个应用程序服务器。 Cisco Unified CVP中的application server存在拒绝服务漏洞，该漏洞源于在通信过程中，CVP接受了畸形的SIP INVITE流量。远程攻击者可通过发送畸形的SIP INVITE流量利用该漏洞造成拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A