Vulnslist

find the latest Cisco vulnerabilities

Cisco Hosted Collaboration Mediation Fulfillment Denial of Service Vulnerability

cisco-sa-ucm-dos-OO4SRYEf · Medium · Published · Updated

A vulnerability in the Java Management Extensions (JMX) component of Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected system. This vulnerability is due to an unsecured TCP/IP port. An attacker could exploit this vulnerability by accessing the port and restarting the JMX process. A successful exploit could allow the attacker to cause a DoS condition on an affected system. Cisco has released software updates that address this vulnerability. There are workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucm-dos-OO4SRYEf

Cisco advisory ·CSAF JSON

Workarounds

There is a workaround that addresses this vulnerability. Administrators can restrict port TCP/1615 access to localhost.

While this workaround has been deployed and was proven successful in a test environment, customers should determine the applicability and effectiveness in their own environment and under their own use conditions. Customers should be aware that any workaround or mitigation that is implemented may negatively impact the functionality or performance of their network based on intrinsic customer deployment scenarios and limitations. Customers should not deploy any workarounds or mitigations before first evaluating the applicability to their own environment and any impact to such environment.

CVEsCVE-2021-1478
Cisco Bug IDsCSCvx35894
CVSS ScoreBase 5.3
Base 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:X/RL:X/RC:X
Product Names From Source
Cisco Unified Communications Manager

Related Products

Product CVE Evidence
Cisco RV Series Routers CVE-2021-1478 Cisco OpenVuln
Cisco Nexus Dashboard CVE-2021-1478 Cisco OpenVuln
Cisco Meraki MX security and SD-WAN appliances CVE-2021-1478 Cisco OpenVuln
Cisco Catalyst PON Series Switches CVE-2021-1478 Cisco OpenVuln
Cisco Unified Communications Manager CVE-2021-1478 Cisco OpenVuln
Cisco Hosted Collaboration Mediation Fulfillment CVE-2021-1478 Cisco OpenVuln