NVD Vulnerability Detail
Search Exploit, PoC
CVE-2024-20375
Summary

A vulnerability in the SIP call processing function of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.

This vulnerability is due to improper parsing of SIP messages. An attacker could exploit this vulnerability by sending a crafted SIP message to an affected Cisco Unified CM or Cisco Unified CM SME device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition that interrupts the communications of reliant voice and video devices.

Publication Date Aug. 22, 2024, 2:15 a.m.
Registration Date Aug. 26, 2024, 4:58 p.m.
Last Update Aug. 22, 2024, 2:24 a.m.
Related information, measures and tools
Common Vulnerabilities List

JVN Vulnerability Information
シスコシステムズの Cisco Unified Communications Manager における境界外書き込みに関する脆弱性
Title シスコシステムズの Cisco Unified Communications Manager における境界外書き込みに関する脆弱性
Summary

シスコシステムズの Cisco Unified Communications Manager には、境界外書き込みに関する脆弱性が存在します。

Possible impacts サービス運用妨害 (DoS) 状態にされる可能性があります。 
Solution

ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。

Publication Date Aug. 21, 2024, midnight
Registration Date Aug. 4, 2025, 11:53 a.m.
Last Update Aug. 4, 2025, 11:53 a.m.
Affected System
シスコシステムズ
Cisco Unified Communications Manager 12.0(1)su1
Cisco Unified Communications Manager 12.0(1)su2
Cisco Unified Communications Manager 12.0(1)su3
Cisco Unified Communications Manager 12.0(1)su4
Cisco Unified Communications Manager 12.0(1)su5
Cisco Unified Communications Manager 12.5(1)
Cisco Unified Communications Manager 12.5(1)su1
Cisco Unified Communications Manager 12.5(1)su2
Cisco Unified Communications Manager 12.5(1)su3
Cisco Unified Communications Manager 12.5(1)su4
Cisco Unified Communications Manager 12.5(1)su5
Cisco Unified Communications Manager 12.5(1)su6
Cisco Unified Communications Manager 12.5(1)su7
Cisco Unified Communications Manager 12.5(1)su7a
Cisco Unified Communications Manager 12.5(1)su8
Cisco Unified Communications Manager 12.5(1)su8a
CVE (情報セキュリティ 共通脆弱性識別子)
CWE (共通脆弱性タイプ一覧)
ベンダー情報
Change Log
No Changed Details Date of change
1 [2025年08月04日]
  掲載
Aug. 4, 2025, 11:53 a.m.