CVE-2015-0615

HIGH 7.1CVE-2015-0615 · Published 03/04/2015 · updated 17/06/2026

In short

CVE-2015-0615 is a HIGH (CVSS 7.1) vulnerability affecting unity connection (cisco).
Chance of exploitation in the next 30 days (EPSS): 1.7%, higher than 76.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
unity connection cisco	`= 10.0.0= 10.0.5= 8.5(1)= 8.5(1)su1= 8.5(1)su2= 8.5(1)su3= 8.5(1)su4= 8.5(1)su5= 8.5(1)su6= 8.5_base= 8.6(1)= 8.6(1a)= 8.6(2)= 8.6(2a)= 8.6(2a)su1= 8.6(2a)su2= 8.6(2a)su3= 8.6_base= 9.0(1)= 9.1(1)= 9.1(2)`	No fix yet

Description

The call-handling implementation in Cisco Unity Connection 8.5 before 8.5(1)SU7, 8.6 before 8.6(2a)SU4, 9.x before 9.1(2)SU2, and 10.0 before 10.0(1)SU1, when SIP trunk integration is enabled, allows remote attackers to cause a denial of service (port consumption) by improperly terminating SIP sessions, aka Bug ID CSCul28089.

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150401-cuc · Vendor Advisory
securitytracker.com/id/1032010

More vulnerabilities in unity connection

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

unity connection

cisco

= 10.0.0= 10.0.5= 8.5(1)= 8.5(1)su1= 8.5(1)su2= 8.5(1)su3= 8.5(1)su4= 8.5(1)su5= 8.5(1)su6= 8.5_base= 8.6(1)= 8.6(1a)= 8.6(2)= 8.6(2a)= 8.6(2a)su1= 8.6(2a)su2= 8.6(2a)su3= 8.6_base= 9.0(1)= 9.1(1)= 9.1(2)

No fix yet

Description

More vulnerabilities in unity connection

See all →