CVE-2013-3461

Severity: high (CVSS 7.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-08-25 · updated 2026-06-16
Weakness: CWE-399

Description

Cisco Unified Communications Manager (Unified CM) 8.5(x) and 8.6(x) before 8.6(2a)su3 and 9.x before 9.1(1) does not properly restrict the rate of SIP packets, which allows remote attackers to cause a denial of service (memory and CPU consumption, and service disruption) via a flood of UDP packets to port 5060, aka Bug ID CSCub35869.

Affected products

Cisco Unified Communications Manager: 9.0(1), 8.5, 8.5(1), 8.5(1)su1, 8.5(1)su2, 8.5(1)su3 (+9)

References

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130821-cucm
http://www.securitytracker.com/id/1028938
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130821-cucm
http://www.securitytracker.com/id/1028938

Get alerted when CVE-2013-3461 or the next vulnerability affects your stack