Vulnerabilities > CVE-2009-5040 - Resource Management Errors vulnerability in Cisco IOS
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN Summary
CallManager Express (CME) on Cisco IOS before 15.0(1)XA allows remote authenticated users to cause a denial of service (device crash) by using an extension mobility (EM) phone to interact with the menu for SNR number changes, aka Bug ID CSCta63555.
Vulnerable Configurations
Common Weakness Enumeration (CWE)
References
- http://www.cisco.com/en/US/docs/ios/15_0/15_0x/15_01_XA/rn800xa.pdf
- http://www.cisco.com/en/US/docs/ios/15_0/15_0x/15_01_XA/rn800xa.pdf
- http://www.securityfocus.com/bid/45765
- http://www.securityfocus.com/bid/45765
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64681
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64681