{"schema_version":"public-product-v1.1","generated_at":"2026-07-21T10:00:03Z","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","advisory":{"id":"Cisco-SA-20070328-CVE-2007-1834","slug":"cisco-sa-20070328-cve-2007-1834","vendor":"Cisco","title":"Cisco Unified CallManager and Unified Presence Server ICMP Echo Request Handling Denial of Service Vulnerability","summary":"Cisco Unified CallManager and Unified Presence Server contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability exists due to improper handling of excessive amounts of ICMP echo requests.  An attacker could exploit this vulnerability by sending a large number of ICMP echo requests to a CallManager or Presence Server system.  These requests may cause various services to crash, resulting in a DoS condition and affecting voice services. Cisco confirmed this vulnerability in a security advisory and released updates. Cisco Unified CallManager is the call-processing component of the Cisco IP telephony solution, and the Unified Presence Server is the identity-tracking component of the telephony solution.  The vulnerability resides in the way these components handle ICMP echo requests.  By sending a large amount of ICMP echo requests to an affected system, attackers can exploit this vulnerability to crash a system, causing a disruption of voice services.  This vulnerability can also be exploited by spoofed attacks. Exploit code is not needed to conduct an attack of this type, which is mainly a brute-force attack.  There are many network utility software packages that can aid in the attempted attack, flooding the network and the specific device with ping requests.  These utilities can be commercial or open source, making access to them available to anyone who downloads them.","severity":"Medium","published_at":"2007-03-28T17:12:45Z","updated_at":"2015-11-25T16:44:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20070328-CVE-2007-1834","csaf_url":"https://sec.cloudapps.cisco.com/security/center/contentjson/CiscoSecurityAdvisory/Cisco-SA-20070328-CVE-2007-1834/csaf/Cisco-SA-20070328-CVE-2007-1834.json","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure."},"freshness":{"last_source_refreshed_at":"2026-07-21T05:16:34Z","latest_source_refresh_at":"2026-07-21T05:16:34Z","oldest_source_refresh_at":"2026-07-21T03:00:03Z","all_sources_fresh":true,"sources":[{"source":"cisco_advisories","label":"Cisco advisories","last_success_at":"2026-07-21T03:00:03Z","stale":false},{"source":"cisco_csaf","label":"Cisco CSAF","last_success_at":"2026-07-21T05:14:24Z","stale":false},{"source":"nvd_cves","label":"NVD CVEs","last_success_at":"2026-07-21T05:16:30Z","stale":false},{"source":"cisa_kev","label":"CISA KEV","last_success_at":"2026-07-21T05:16:31Z","stale":false},{"source":"first_epss","label":"EPSS","last_success_at":"2026-07-21T05:16:34Z","stale":false}]},"summary":{"cve_count":1,"visible_product_count":2,"public_evidence_count":2,"kev_count":0,"highest_epss":0.01916},"cves":[{"id":"CVE-2007-1834","kev":false,"epss":{"score":0.01916,"percentile":0.77593,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"}}],"public_evidence":[{"product":{"name":"Cisco Unified Communications Manager","slug":"cisco-unified-communications-manager","vendor":"Cisco"},"cve":{"id":"CVE-2007-1834"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T05:18:51Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Unified Communications Manager","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.01916,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2007-03-28T17:12:45Z","updated_at":"2015-11-25T16:44:00Z","advisory_updated_at":"2015-11-25T16:44:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20070328-CVE-2007-1834","row_display_order":1},{"product":{"name":"Cisco Unified Presence Server","slug":"cisco-unified-presence-server","vendor":"Cisco"},"cve":{"id":"CVE-2007-1834"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T05:18:51Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Unified Presence Server","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.01916,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2007-03-28T17:12:45Z","updated_at":"2015-11-25T16:44:00Z","advisory_updated_at":"2015-11-25T16:44:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20070328-CVE-2007-1834","row_display_order":2}]}