CVE-2021-1478CWE-284

Cisco Unified Communications Manager Denial of Service Vulnerability

Medium · published May 6, 2021

CVSS v3.1
5.3
EPSS
1%
Percentile
63.0
In the wild
Unconfirmed
What it is

A vulnerability in the Java Management Extensions (JMX) component of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected system. This vulnerability is due to an unsecured TCP/IP port. An attacker could exploit this vulnerability by accessing the port and restarting the JMX process. A successful exploit could allow the attacker to cause a DoS condition on an affected system.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.01015 · 63.0th percentile
Weakness
CWE-284 · Improper Access Control
Published
2021-05-06T12:41Z
EPSS history
Timeline
  • 06 MAY 12:41Z
    Cisco Unified Communications Manager Denial of Service Vulnerability
    cvelistv5