HIGH · 7.8

CVE-2010-1570

The computer telephony integration (CTI) server component in Cisco Unified Contact Center Express (UCCX) 7.0 before 7.0(1)SR4 and 7.0(2), 6.0 before 6.0(1)SR1, and 5.0 before 5.0(2)SR3 allows remote a...

Vulnerability Description

The computer telephony integration (CTI) server component in Cisco Unified Contact Center Express (UCCX) 7.0 before 7.0(1)SR4 and 7.0(2), 6.0 before 6.0(1)SR1, and 5.0 before 5.0(2)SR3 allows remote attackers to cause a denial of service (CTI server and Node Manager failure) via a malformed CTI message.

CVSS Score

7.8

HIGH

AV:N/AC:L/Au:N/C:N/I:N/A:C
Confidentiality
NONE
Integrity
NONE
Availability
COMPLETE

Affected Products

VendorProductVersions
CiscoUnified Contact Center Express5.0
CiscoCustomer Response Solution5.0
CiscoUnified Ip Interactive Voice Response5.0

References

FAQ

What is CVE-2010-1570?

CVE-2010-1570 is a vulnerability with a CVSS score of 7.8 (HIGH). The computer telephony integration (CTI) server component in Cisco Unified Contact Center Express (UCCX) 7.0 before 7.0(1)SR4 and 7.0(2), 6.0 before 6.0(1)SR1, and 5.0 before 5.0(2)SR3 allows remote a...

How severe is CVE-2010-1570?

CVE-2010-1570 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2010-1570?

Check the references section above for vendor advisories and patch information. Affected products include: Cisco Unified Contact Center Express, Cisco Customer Response Solution, Cisco Unified Ip Interactive Voice Response.