CVE-2009-0057 describes a denial-of-service vulnerability in the Certificate Authority Proxy Function (CAPF) service of Cisco Unified Communications Manager versions 5.x before 5.1(3e) and 6.x before 6.1(3). An unauthenticated remote attacker can exploit this by sending malformed input during a prematurely terminated TCP session, leading to a voice service outage. This vulnerability has a CVSS score of 4.3 (medium severity), indicating a network-based attack with medium complexity and partial availability impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
5.0CPE matchmatch criteria | cpe:2.3:a:cisco:unified_communications_manager:5.0:*:*:*:*:*:*:* | ||
5.0_1CPE matchmatch criteria | cpe:2.3:a:cisco:unified_communications_manager:5.0_1:*:*:*:*:*:*:* | ||
5.0_2CPE matchmatch criteria | cpe:2.3:a:cisco:unified_communications_manager:5.0_2:*:*:*:*:*:*:* | ||
5.0_3CPE matchmatch criteria | cpe:2.3:a:cisco:unified_communications_manager:5.0_3:*:*:*:*:*:*:* | ||
5.0_3aCPE matchmatch criteria | cpe:2.3:a:cisco:unified_communications_manager:5.0_3a:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:M/Au:N/C:N/I:N/A:P
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.