CVE-2013-3460

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-08-25 · updated 2026-06-16
Weakness: CWE-399

Description

Memory leak in Cisco Unified Communications Manager (Unified CM) 8.5(x) before 8.5(1)su6, 8.6(x) before 8.6(2a)su3, and 9.x before 9.1(1) allows remote attackers to cause a denial of service (service disruption) via a high rate of UDP packets, aka Bug ID CSCub85597.

Affected products

Cisco Unified Communications Manager: 8.6, 8.6(1), 8.6(1a), 8.6(2), 8.6(2a), 8.6(2a)su1 (+9)

References

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130821-cucm
http://www.securitytracker.com/id/1028938
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130821-cucm
http://www.securitytracker.com/id/1028938

Get alerted when CVE-2013-3460 or the next vulnerability affects your stack