CVE-2010-1570
Summary
| CVE | CVE-2010-1570 |
|---|---|
| State | PUBLISHED |
| Assigner | cisco |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2010-06-10 00:30:07 UTC |
| Updated | 2026-04-29 01:13:23 UTC |
| Description | The computer telephony integration (CTI) server component in Cisco Unified Contact Center Express (UCCX) 7.0 before 7.0(1)SR4 and 7.0(2), 6.0 before 6.0(1)SR1, and 5.0 before 5.0(2)SR3 allows remote attackers to cause a denial of service (CTI server and Node Manager failure) via a malformed CTI message. |
Risk And Classification
Primary CVSS: v2.0 7.8 from [email protected]
AV:N/AC:L/Au:N/C:N/I:N/A:C
Problem Types: NVD-CWE-noinfo | n/a
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
LowAuthentication
NoneConfidentiality
NoneIntegrity
NoneAvailability
CompleteAV:N/AC:L/Au:N/C:N/I:N/A:C
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Cisco | Customer Response Solution | 5.0 | All | All | All |
| Application | Cisco | Customer Response Solution | 6.0 | All | All | All |
| Application | Cisco | Customer Response Solution | 7.0 | All | All | All |
| Application | Cisco | Unified Contact Center Express | 5.0 | All | All | All |
| Application | Cisco | Unified Contact Center Express | 6.0 | All | All | All |
| Application | Cisco | Unified Contact Center Express | 7.0 | All | All | All |
| Application | Cisco | Unified Ip Interactive Voice Response | 5.0 | All | All | All |
| Application | Cisco | Unified Ip Interactive Voice Response | 6.0 | All | All | All |
| Application | Cisco | Unified Ip Interactive Voice Response | 7.0 | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Cisco Unified Contact Center Express CTI Messages Denial of Service Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| IBM X-Force Exchange | af854a3a-2127-422b-91ae-364da2661108 | exchange.xforce.ibmcloud.com | |
| SecurityTracker.com Archives - Cisco Unified Contact Center Express CTI Server Bug Lets Remote Users Deny Service | af854a3a-2127-422b-91ae-364da2661108 | www.securitytracker.com | |
| Cisco Security Advisory: Vulnerabilities in Cisco Unified Contact Center Express - Cisco Systems | af854a3a-2127-422b-91ae-364da2661108 | www.cisco.com | Patch, Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.