CVE-2016-1466

High

Published: 08/08/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

A vulnerability in Cisco Unified Communications Manager IM and Presence Service allows remote attackers to cause a denial of service via crafted headers in a SIP packet, leading to a restart of the sipd process.

Risk Assessment

Attackers could exploit this vulnerability to disrupt communication services within the organization, potentially leading to downtime and loss of availability.

Recommendation

It is recommended to upgrade to the latest version of Cisco Unified Communications Manager software to mitigate this vulnerability.

Other vulnerabilities in Cisco Unified Communications Manager IM and Presence Service

CVE-2016-6464High
A vulnerability in the web management interface of the Cisco Unified Communications Manager IM and Presence Service could allow an unauthenticated, remote attacker to view information on web pages that should be restricted.

Original NVD description (English source)

Cisco Unified Communications Manager IM and Presence Service 9.1(1) SU6, 9.1(1) SU6a, 9.1(1) SU7, 10.5(2) SU2, 10.5(2) SU2a, 11.0(1) SU1, and 11.5(1) allows remote attackers to cause a denial of service (sipd process restart) via crafted headers in a SIP packet, aka Bug ID CSCva39072.