A vulnerability in an API endpoint of multiple Cisco Unified Communications Products could allow an unauthenticated, remote attacker to cause high CPU utilization, which could impact access to the web-based management interface and cause delays with call processing. This API is not used for device management and is unlikely to be used in normal operations of the device. This vulnerability is due to improper API authentication and incomplete validation of the API request. An attacker could exploit this vulnerability by sending a crafted HTTP request to a specific API on the device. A successful exploit could allow the attacker to cause a denial of service (DoS) condition due to high CPU utilization, which could negatively impact user traffic and management access. When the attack stops, the device will recover without manual intervention.

According to its self-reported version, Cisco Unified Communications Manager IM & Presence running on the remote host is affected by a denial of service (DoS) vulnerability. Due to improper API authentication and incomplete verification of the API request, an unauthenticated, remote attacker can send a specially crafted HTTP request to a specific API causing a DoS condition due to high CPU utilization. A successful attack can negatively impact user traffic and management.

Please see the included Cisco BIDs and Cisco Security Advisory for more information.

According to its self-reported version, Cisco Emergency Responder running on the remote host is affected by a denial of service (DoS) vulnerability. Due to improper API authentication and incomplete verification of the API request, an unauthenticated, remote attacker can send a specially crafted HTTP request to a specific API causing a DoS condition due to high CPU utilization. A successful attack can negatively impact user traffic and management.

Please see the included Cisco BIDs and Cisco Security Advisory for more information.

According to its self-reported version, Cisco Unified Communications Manager running on the remote host is affected by a denial of service (DoS) vulnerability. Due to improper API authentication and incomplete verification of the API request, an unauthenticated, remote attacker can send a specially crafted HTTP request to a specific API causing a DoS condition due to high CPU utilization. A successful attack can negatively impact user traffic and management .

Please see the included Cisco BIDs and Cisco Security Advisory for more information.

According to its self-reported version, Cisco Unity Connection running on the remote host is affected by a denial of service (DoS) vulnerability. Due to improper API authentication and incomplete verification of the API request, an unauthenticated, remote attacker can send a specially crafted HTTP request to a specific API causing a DoS condition due to high CPU utilization. A successful attack can negatively impact user traffic and management.

Please see the included Cisco BIDs and Cisco Security Advisory for more information.

ID	Name	Product	Family	Type	Severity
182616	Cisco Unified Communications Manager IM & Presence DoS (cisco-sa-cucm-apidos-PGsDcdNF)	Nessus	CISCO	Combined	high
182615	Cisco Emergency Responder DoS (cisco-sa-cucm-apidos-PGsDcdNF)	Nessus	CISCO	Local	high
182614	Cisco Unified Communications Manager DoS (cisco-sa-cucm-apidos-PGsDcdNF)	Nessus	CISCO	Combined	high
182613	Cisco Unity Connection DoS (cisco-sa-cucm-apidos-PGsDcdNF)	Nessus	CISCO	Local	high

Detections

Analytics

CVE-2023-20259

high

Tenable Plugins

high

high

high

high