CVE-2010-2837

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-08-26 · updated 2026-06-16

Description

The SIPStationInit implementation in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.1SU before 6.1(5)SU1, 7.0SU before 7.0(2a)SU3, 7.1SU before 7.1(3b)SU2, 7.1 before 7.1(5), and 8.0 before 8.0(1) allows remote attackers to cause a denial of service (process failure) via a malformed SIP message, aka Bug ID CSCtd17310.

Affected products

Cisco Unified Communications Manager: through 6.1\(5\); through 7.0\(2a\)su2; through 7.1\(5\)su1a; 6.1(1), 6.1(1a), 6.1(1b), 6.1(2), 6.1(2)su1, 6.1(2)su1a (+31)

References

http://www.cisco.com/en/US/products/products_security_advisory09186a0080b43908.shtml
http://www.vupen.com/english/advisories/2010/2187
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b43908.shtml
http://www.vupen.com/english/advisories/2010/2187

Get alerted when CVE-2010-2837 or the next vulnerability affects your stack