CVE-2009-2054

HIGH 7.8CVE-2009-2054 · Published 27/08/2009 · updated 16/06/2026

In short

CVE-2009-2054 is a HIGH (CVSS 7.8) vulnerability affecting unified communications manager (cisco).
Chance of exploitation in the next 30 days (EPSS): 3.4%, higher than 88.9% of all vulnerabilities.
Fix: update to 5.1\(3g\), 6.1\(4\), 7.0\(2a\)su1, 7.1\(2a\)su1 or later.

Package	Affected versions	Patched versions
unified communications manager cisco	`≥ 4.0, < 5.1\(3g\)≥ 6.0, < 6.1\(4\)≥ 7.0, < 7.0\(2a\)su1≥ 7.1, < 7.1\(2a\)su1`	`5.1\(3g\)6.1\(4\)7.0\(2a\)su17.1\(2a\)su1`

Description

Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x, 5.x before 5.1(3g), 6.x before 6.1(4), 7.0 before 7.0(2a)su1, and 7.1 before 7.1(2a)su1 allows remote attackers to cause a denial of service (file-descriptor exhaustion and SIP outage) via a flood of TCP packets, aka Bug ID CSCsx23689.

References

osvdb.org/57456 · Broken Link
secunia.com/advisories/36498 · Broken Link
secunia.com/advisories/36499 · Broken Link
cisco.com/en/US/products/products_security_advisory09186a0080af2d11.shtml · Broken Link
securityfocus.com/bid/36152 · Broken Link
securitytracker.com/id · Broken Link

More vulnerabilities in unified communications manager

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

unified communications manager

cisco

≥ 4.0, < 5.1\(3g\)≥ 6.0, < 6.1\(4\)≥ 7.0, < 7.0\(2a\)su1≥ 7.1, < 7.1\(2a\)su1

5.1\(3g\)6.1\(4\)7.0\(2a\)su17.1\(2a\)su1

Description

More vulnerabilities in unified communications manager

See all →