CVE-2012-5977

CVE-2012-5977 describes a denial-of-service vulnerability affecting Asterisk Open Source versions 1.8.x, 10.x, and 11.x, as well as Certified Asterisk 1.8.11 and Asterisk Digiumphones 10.x-digiumphones. When anonymous calls are enabled, remote attackers can exploit this by initiating numerous anonymous calls, leading to excessive resource consumption due to an overloaded device state cache. Rated with a CVSS score of 4.3 (Medium), this vulnerability has a network attack vector, medium attack complexity, and requires no authentication, resulting in a partial availability impact. The EPSS score is low at 0.01103, suggesting a low probability of exploitation. There is no evidence of active exploitation (KEV: No), nor are there any public exploit modules available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, indicating a lack of widespread attention or exploitation.