CVE-2015-0615

Severity: high (CVSS 7.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-04-03 · updated 2026-06-17
Weakness: CWE-19

Description

The call-handling implementation in Cisco Unity Connection 8.5 before 8.5(1)SU7, 8.6 before 8.6(2a)SU4, 9.x before 9.1(2)SU2, and 10.0 before 10.0(1)SU1, when SIP trunk integration is enabled, allows remote attackers to cause a denial of service (port consumption) by improperly terminating SIP sessions, aka Bug ID CSCul28089.

Affected products

Cisco Unity Connection: 8.5(1), 8.5(1)su1, 8.5(1)su2, 8.5(1)su3, 8.5(1)su4, 8.5(1)su5 (+15)

References

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150401-cuc
http://www.securitytracker.com/id/1032010
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150401-cuc
http://www.securitytracker.com/id/1032010

Get alerted when CVE-2015-0615 or the next vulnerability affects your stack