CVE-2010-0587

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-03-05 · updated 2026-06-16

Description

Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x before 4.3(2)SR2, 6.x before 6.1(5), 7.x before 7.1(3a)su1, and 8.x before 8.0(1) allows remote attackers to cause a denial of service (process failure) via a malformed SCCP StationCapabilitiesRes message with an invalid MaxCap field, aka Bug ID CSCtc38985.

Affected products

Cisco Unified Communications Manager: 4.1, 4.1-(3)sr.5, 4.1-(3)sr4, 4.1-(3)sr5, 4.1-(3)sr5b, 4.1-(3)sr5c (+54)

References

http://securitytracker.com/id?1023670
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1b924.shtml
http://www.securityfocus.com/bid/38496
http://securitytracker.com/id?1023670
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1b924.shtml
http://www.securityfocus.com/bid/38496

Get alerted when CVE-2010-0587 or the next vulnerability affects your stack