CVE-2005-0186

high

Description

Cisco IOS 12.1YD, 12.2T, 12.3 and 12.3T, when configured for the IOS Telephony Service (ITS), CallManager Express (CME) or Survivable Remote Site Telephony (SRST), allows remote attackers to cause a denial of service (device reboot) via a malformed packet to the SCCP port.

References

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4849

https://exchange.xforce.ibmcloud.com/vulnerabilities/18956

https://euvd.enisa.europa.eu/vulnerability/EUVD-2005-0187

http://www.cisco.com/warp/public/707/cisco-sa-20050119-itscme.shtml

http://securitytracker.com/id?1012945

http://secunia.com/advisories/13913

Details

Source: Mitre, NVD

Published: 2005-01-19

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P

Severity: Medium

CVSS v3

Base Score: 7.5

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Severity: High

EPSS

EPSS: 0.02638