Cisco Unified Contact Center Enterprise Denial of Service Vulnerability

A vulnerability in the Live Data server of Cisco Unified Contact Center Enterprise could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability exists because the affected software improperly manages resources when processing inbound Live Data traffic. An attacker could exploit this vulnerability by sending multiple crafted Live Data packets to an affected device. A successful exploit could cause the affected device to run out of buffer resources, which could result in a stack overflow and cause the affected device to reload, resulting in a DoS condition. Note: The Live Data port in Cisco Unified Contact Center Enterprise devices allows only a single TCP connection. To exploit this vulnerability, an attacker would have to send crafted packets to an affected device before a legitimate Live Data client establishes a connection.

N/A

使用共享资源的并发执行不恰当同步问题(竞争条件)

Cisco Unified Contact Center Enterprise 竞争条件问题漏洞

Cisco Unified Contact Center Express（Unified CCX）是美国思科（Cisco）公司的一款统一通信解决方案中的客户关系管理组件。该组件支持自助语音服务、呼叫分配和客户访问控制等功能。 Cisco Unified Contact Center Enterprise 12.5（1）之前版本中存在竞争条件问题漏洞，该漏洞源于受影响的软件在处理入站实时数据流量时没有正确地管理资源。攻击者可通过将多个特制的实时数据包发送到受影响的设备利用该漏洞导致栈溢出及设备重启，造成拒绝

N/A

N/A