CVE-2016-1466

Severity: high (CVSS 7.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-08-08 · updated 2026-06-17
Weakness: CWE-399

Description

Cisco Unified Communications Manager IM and Presence Service 9.1(1) SU6, 9.1(1) SU6a, 9.1(1) SU7, 10.5(2) SU2, 10.5(2) SU2a, 11.0(1) SU1, and 11.5(1) allows remote attackers to cause a denial of service (sipd process restart) via crafted headers in a SIP packet, aka Bug ID CSCva39072.

Affected products

Cisco Unified Communications Manager IM and Presence Service: 9.1(1), 10.5(2), 11.0(1), 11.5(1)

References

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160803-ucm
http://www.securityfocus.com/bid/92271
http://www.securitytracker.com/id/1036526
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160803-ucm
http://www.securityfocus.com/bid/92271
http://www.securitytracker.com/id/1036526

Get alerted when CVE-2016-1466 or the next vulnerability affects your stack