CVE-2010-0591

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-03-05 · updated 2026-06-16

Description

Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5), 7.x before 7.1(3b)SU2, and 8.x before 8.0(1) allows remote attackers to cause a denial of service (process failure) via a malformed SIP REG message, related to an overflow of the Telephone-URL field, aka Bug ID CSCtc62362.

Affected products

Cisco Unified Communications Manager: 6.0, 6.0(1), 6.0(1a), 6.1, 6.1(1), 6.1(1a) (+12)

References

http://securitytracker.com/id?1023670
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1b924.shtml
http://www.securityfocus.com/bid/38498
http://securitytracker.com/id?1023670
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1b924.shtml
http://www.securityfocus.com/bid/38498

Get alerted when CVE-2010-0591 or the next vulnerability affects your stack