CVE-2017-3808

A vulnerability in the Session Initiation Protocol (SIP) UDP throttling process of Cisco Unified Communications Manager (Cisco Unified CM) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient rate limiting protection. An attacker could exploit this vulnerability by sending the affected device a high rate of SIP messages. An exploit could allow the attacker to cause the device to reload unexpectedly. The device and services will restart automatically. This vulnerability affects Cisco Unified Communications Manager (CallManager) releases prior to the first fixed release; the following list indicates the first minor release that includes the fix for this vulnerability: 10.5.2.14900-16 11.0.1.23900-5 11.5.1.12900-2. Cisco Bug IDs: CSCuz72455.

• CWE-119
• CWE-119

• http://www.securityfocus.com/bid/97922Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038318
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-ucmVendor Advisory
• http://www.securityfocus.com/bid/97922Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038318
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-ucmVendor Advisory

Published

Apr 20, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-3802A vulnerability in Cisco Unified Communications Manager coul…
• CVE-2017-3803A vulnerability in the Cisco IOS Software forwarding queue o…
• CVE-2017-3804A vulnerability in Intermediate System-to-Intermediate Syste…
• CVE-2017-3805A vulnerability in the web-based management interface of Cis…
• CVE-2017-3806A vulnerability in CLI command processing in the Cisco Firep…5.3
• CVE-2017-3807A vulnerability in Common Internet Filesystem (CIFS) code in…
• CVE-2017-3809A vulnerability in the Policy deployment module of the Cisco…
• CVE-2017-3810A vulnerability in the web framework of Cisco Prime Service …
• CVE-2017-3811An XML External Entity vulnerability in Cisco WebEx Meetings…
• CVE-2017-3812A vulnerability in the implementation of Common Industrial P…
• CVE-2017-3813A vulnerability in the Start Before Logon (SBL) module of Ci…
• CVE-2017-3814A vulnerability in Cisco Firepower System Software could all…