CVE-2010-1570
Last modified
CVE-2010-1570 is a vulnerability of currently unknown severity. The computer telephony integration (CTI) server component in Cisco Unified Contact Center Express (UCCX) 7.0 before 7.0(1)SR4 and 7.0(2), 6.0 before 6.0(1)SR1, and 5.0 before 5.0(2)SR3 allows remote attackers to cause a denial of service (CTI server and Node Manager failure) via a malformed CTI message.. EPSS estimates a 2.52% chance of exploitation in the next 30 days.
Description
The computer telephony integration (CTI) server component in Cisco Unified Contact Center Express (UCCX) 7.0 before 7.0(1)SR4 and 7.0(2), 6.0 before 6.0(1)SR1, and 5.0 before 5.0(2)SR3 allows remote attackers to cause a denial of service (CTI server and Node Manager failure) via a malformed CTI message.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Unified Contact Center Express | 5.0 |
| Cisco | Unified Contact Center Express | 6.0 |
| Cisco | Unified Contact Center Express | 7.0 |
| Cisco | Customer Response Solution | 5.0 |
| Cisco | Customer Response Solution | 6.0 |
| Cisco | Customer Response Solution | 7.0 |
| Cisco | Unified Ip Interactive Voice Response | 5.0 |
| Cisco | Unified Ip Interactive Voice Response | 6.0 |
| Cisco | Unified Ip Interactive Voice Response | 7.0 |
References
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b2f110.shtmlPatch, Vendor Advisory
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b2f110.shtmlPatch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2010-1570?
How severe is CVE-2010-1570?
How do I fix CVE-2010-1570?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2010
- CVE-2010-1562The SIP implementation on the Cisco PGW 2200 Softswitch with…
- CVE-2010-1563The SIP implementation on the Cisco PGW 2200 Softswitch with…
- CVE-2010-1564Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2010-1565Unspecified vulnerability in the SIP implementation on the C…
- CVE-2010-1567The SIP implementation on the Cisco PGW 2200 Softswitch with…
- CVE-2010-1568The Send Secure functionality in the Cisco IronPort Desktop …
- CVE-2010-1571Directory traversal vulnerability in the bootstrap service i…
- CVE-2010-1572Unspecified vulnerability in the tech support diagnostic she…
- CVE-2010-1573Linksys WAP54Gv3 firmware 3.04.03 and earlier uses a hard-co…9.8
- CVE-2010-1574IOS 12.2(52)SE and 12.2(52)SE1 on Cisco Industrial Ethernet …
- CVE-2010-1575The Cisco Content Services Switch (CSS) 11500 with software …
- CVE-2010-1576The Cisco Content Services Switch (CSS) 11500 with software …
Are you affected by CVE-2010-1570?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST