MEDIUM · 6.8

CVE-2013-3418

Cisco Unified Communications Domain Manager does not properly allocate memory for GET and POST requests, which allows remote authenticated users to cause a denial of service (memory consumption and pr...

Vulnerability Description

Cisco Unified Communications Domain Manager does not properly allocate memory for GET and POST requests, which allows remote authenticated users to cause a denial of service (memory consumption and process crash) via crafted requests to the management interface, aka Bug ID CSCud22922.

CVSS Score

6.8

MEDIUM

AV:N/AC:L/Au:S/C:N/I:N/A:C
Confidentiality
NONE
Integrity
NONE
Availability
COMPLETE

Affected Products

VendorProductVersions
CiscoUnified Communications Domain Manager-

Related Weaknesses (CWE)

References

FAQ

What is CVE-2013-3418?

CVE-2013-3418 is a vulnerability with a CVSS score of 6.8 (MEDIUM). Cisco Unified Communications Domain Manager does not properly allocate memory for GET and POST requests, which allows remote authenticated users to cause a denial of service (memory consumption and pr...

How severe is CVE-2013-3418?

CVE-2013-3418 has been rated MEDIUM with a CVSS base score of 6.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2013-3418?

Check the references section above for vendor advisories and patch information. Affected products include: Cisco Unified Communications Domain Manager.