CVE-2024-20375

A vulnerability in the SIP call processing function of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper parsing of SIP messages. An attacker could exploit this vulnerability by sending a crafted SIP message to an affected Cisco Unified CM or Cisco Unified CM SME device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition that interrupts the communications of reliant voice and video devices.

• CWE-787

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-dos-kkHq43WeVendor Advisory

Published

Aug 21, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-2037Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2024-20370A vulnerability in the Cisco FXOS CLI feature on specific ha…6
• CVE-2024-20371A vulnerability in the access control list (ACL) programming…5.3
• CVE-2024-20372A vulnerability in the web-based management interface of Cis…6.1
• CVE-2024-20373A vulnerability in the implementation of the Simple Network …5.3
• CVE-2024-20374A vulnerability in the web-based management interface of Cis…7.2
• CVE-2024-20376A vulnerability in the web-based management interface of Cis…7.5
• CVE-2024-20377A vulnerability in the web-based management interface of Cis…5.4
• CVE-2024-20378A vulnerability in the web-based management interface of Cis…7.5
• CVE-2024-20379A vulnerability in the web-based management interface of Cis…6.5
• CVE-2024-2038The Visual Website Collaboration, Feedback & Project Managem…7.5
• CVE-2024-20380A vulnerability in the HTML parser of ClamAV could allow an …7.5