Vulnerability Description
The Skinny Call Control Protocol (SCCP) implementation in Cisco Unified CallManager (CUCM) 3.3 before 3.3(5)SR2a, 4.1 before 4.1(3)SR4, 4.2 before 4.2(3)SR1, and 5.0 before 5.0(4a)SU1 allows remote attackers to cause a denial of service (loss of voice services) by sending crafted packets to the (1) SCCP (2000/tcp) or (2) SCCPS (2443/tcp) port.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Unified Callmanager | 3.3 |
References
- http://secunia.com/advisories/24665PatchVendor Advisory
- http://securitytracker.com/id?1017826Patch
- http://www.cisco.com/warp/public/707/cisco-sa-20070328-voip.shtmlPatchVendor Advisory
- http://www.securityfocus.com/bid/23181
- http://www.vupen.com/english/advisories/2007/1144
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33295
- http://secunia.com/advisories/24665PatchVendor Advisory
- http://securitytracker.com/id?1017826Patch
- http://www.cisco.com/warp/public/707/cisco-sa-20070328-voip.shtmlPatchVendor Advisory
- http://www.securityfocus.com/bid/23181
- http://www.vupen.com/english/advisories/2007/1144
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33295
FAQ
What is CVE-2007-1833?
CVE-2007-1833 is a vulnerability with a CVSS score of 5.0 (MEDIUM). The Skinny Call Control Protocol (SCCP) implementation in Cisco Unified CallManager (CUCM) 3.3 before 3.3(5)SR2a, 4.1 before 4.1(3)SR4, 4.2 before 4.2(3)SR1, and 5.0 before 5.0(4a)SU1 allows remote at...
How severe is CVE-2007-1833?
CVE-2007-1833 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2007-1833?
Check the references section above for vendor advisories and patch information. Affected products include: Cisco Unified Callmanager.