Executive Summary

Informations
Name CVE-2009-5040 First vendor Publication 2011-01-07
Vendor Cve Last vendor Modification 2017-08-17

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:S/C:N/I:N/A:C)
Cvss Base Score 6.8 Attack Range Network
Cvss Impact Score 6.9 Attack Complexity Low
Cvss Expoit Score 8 Authentication Requires single instance
Calculate full CVSS 2.0 Vectors scores

Detail

CallManager Express (CME) on Cisco IOS before 15.0(1)XA allows remote authenticated users to cause a denial of service (device crash) by using an extension mobility (EM) phone to interact with the menu for SNR number changes, aka Bug ID CSCta63555.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-5040

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-399 Resource Management Errors

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 1
Hardware 286
Os 5356

Open Source Vulnerability Database (OSVDB)

Id Description
70341 Cisco IOS CallManager Express (CME) Extension Mobility Phone SNR Number Chang...

Cisco IOS CallManager Express (CME) contains a flaw that may allow a remote denial of service. The issue is triggered when a remote, authenticated attacker uses an extension mobility phone to make SNR number changes in the menu, resulting in a device crash denial of service.

Sources (Detail)

Source Url
BID http://www.securityfocus.com/bid/45765
CONFIRM http://www.cisco.com/en/US/docs/ios/15_0/15_0x/15_01_XA/rn800xa.pdf
XF https://exchange.xforce.ibmcloud.com/vulnerabilities/64681

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
Date Informations
2024-03-07 01:11:48
  • Multiple Updates
2023-08-12 12:13:43
  • Multiple Updates
2023-08-12 01:03:17
  • Multiple Updates
2023-08-11 12:11:40
  • Multiple Updates
2023-08-11 01:03:25
  • Multiple Updates
2023-08-06 12:11:12
  • Multiple Updates
2023-08-06 01:03:19
  • Multiple Updates
2023-08-04 12:11:17
  • Multiple Updates
2023-08-04 01:03:21
  • Multiple Updates
2023-07-14 12:11:14
  • Multiple Updates
2023-07-14 01:03:19
  • Multiple Updates
2023-05-10 01:09:50
  • Multiple Updates
2023-03-29 01:12:53
  • Multiple Updates
2023-03-28 12:03:25
  • Multiple Updates
2022-10-11 12:10:00
  • Multiple Updates
2022-10-11 01:03:07
  • Multiple Updates
2022-09-03 12:09:09
  • Multiple Updates
2021-10-08 12:07:32
  • Multiple Updates
2021-08-26 01:06:47
  • Multiple Updates
2021-05-04 12:10:46
  • Multiple Updates
2021-04-22 01:11:14
  • Multiple Updates
2021-04-01 01:05:51
  • Multiple Updates
2020-06-11 01:06:05
  • Multiple Updates
2020-06-10 01:04:35
  • Multiple Updates
2020-06-09 01:04:50
  • Multiple Updates
2020-05-24 01:06:12
  • Multiple Updates
2020-05-23 01:41:24
  • Multiple Updates
2020-05-23 00:24:57
  • Multiple Updates
2019-10-05 12:03:07
  • Multiple Updates
2019-09-28 12:03:08
  • Multiple Updates
2019-05-18 12:02:31
  • Multiple Updates
2019-04-03 12:01:52
  • Multiple Updates
2019-04-02 12:01:33
  • Multiple Updates
2019-01-01 12:02:52
  • Multiple Updates
2018-07-25 12:02:09
  • Multiple Updates
2018-04-25 12:02:44
  • Multiple Updates
2017-09-19 12:01:33
  • Multiple Updates
2017-08-30 12:02:00
  • Multiple Updates
2017-08-17 09:22:52
  • Multiple Updates
2017-08-08 12:02:37
  • Multiple Updates
2017-04-05 12:01:15
  • Multiple Updates
2016-10-29 01:00:47
  • Multiple Updates
2016-09-21 01:00:47
  • Multiple Updates
2016-06-28 17:58:50
  • Multiple Updates
2016-04-26 19:28:08
  • Multiple Updates
2013-05-11 00:05:03
  • Multiple Updates