© 2026 vulntracker.io

CVE-2012-3949

N/A

Published: September 27, 2012 at 12:00 AM UTC

Updated: June 16, 2026 at 11:44 PM UTC

3 products affected across 1 vendorIOSIOS XeUnified Communications Manager

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 3%

Description

The SIP implementation in Cisco Unified Communications Manager (CUCM) 6.x and 7.x before 7.1(5b)su5, 8.x before 8.5(1)su4, and 8.6 before 8.6(2a)su1; Cisco IOS 12.2 through 12.4 and 15.0 through 15.2; and Cisco IOS XE 3.3.xSG before 3.3.1SG, 3.4.xS, and 3.5.xS allows remote attackers to cause a denial of service (service crash or device reload) via a crafted SIP message containing an SDP session description, aka Bug IDs CSCtw66721, CSCtj33003, and CSCtw84664.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

IOS · Cisconpm

95%

12.2 12.2b 12.2bc 12.2bw 12.2bx 12.2by 12.2bz 12.2ca 12.2cx 12.2cy 12.2cz 12.2da 12.2dd 12.2dx 12.2ew 12.2ewa 12.2ex 12.2ey 12.2ez 12.2fx 12.2fy 12.2fz 12.2irb 12.2ixa 12.2ixb 12.2ixc 12.2ixd 12.2ixe 12.2ixf 12.2ixg 12.2l 12.2mb 12.2rc 12.2s 12.2sb 12.2sbc 12.2sca 12.2scb 12.2se 12.2sea 12.2seb 12.2sec 12.2sed 12.2see 12.2sef 12.2seg 12.2sg 12.2sga 12.2sm 12.2sr 12.2sra 12.2srb 12.2src 12.2su 12.2sv 12.2sva 12.2svc 12.2svd 12.2sve 12.2sw 12.2sx 12.2sxa 12.2sxb 12.2sxd 12.2sxe 12.2sxf 12.2sxi 12.2sy 12.2sz 12.2t 12.2tpc 12.2xa 12.2xb 12.2xc 12.2xd 12.2xe 12.2xf 12.2xg 12.2xh 12.2xi 12.2xj 12.2xk 12.2xl 12.2xm 12.2xn 12.2xnb 12.2xnc 12.2xnd 12.2xo 12.2xq 12.2xr 12.2xs 12.2xt 12.2xu 12.2xv 12.2xw 12.2ya 12.2yb 12.2yc 12.2yd 12.2ye 12.2yf 12.2yg 12.2yh 12.2yj 12.2yk 12.2yl 12.2ym 12.2yn 12.2yo 12.2yp 12.2yq 12.2yr 12.2ys 12.2yt 12.2yu 12.2yv 12.2yw 12.2yx 12.2yy 12.2yz 12.2za 12.2zb 12.2zc 12.2zd 12.2ze 12.2zf 12.2zg 12.2zh 12.2zj 12.2zl 12.2zp 12.2zu 12.2zx 12.2zy 12.2zya 12.3 12.3b 12.3bc 12.3bw 12.3ja 12.3jea 12.3jeb 12.3jec 12.3jk 12.3jl 12.3jx 12.3t 12.3tpc 12.3va 12.3xa 12.3xb 12.3xc 12.3xd 12.3xe 12.3xf 12.3xg 12.3xi 12.3xk 12.3xl 12.3xq 12.3xr 12.3xs 12.3xu 12.3xw 12.3xx 12.3xy 12.3xz 12.3ya 12.3yd 12.3yf 12.3yg 12.3yh 12.3yj 12.3yk 12.3ym 12.3yq 12.3ys 12.3yt 12.3yu 12.3yx 12.3yz 12.3za 15.0 15.0(1)s1 15.0(1)s2 15.0(1)se 15.0m 15.0mr 15.0mra 15.0s 15.0sa 15.0sg 15.0xa 15.0xo 15.1 15.1(1)xb1 15.1(2)t 15.1(3)t 15.1(4)m 15.1(4)m1 15.1ey 15.1gc 15.1m 15.1s 15.1t 15.1xb 15.2

IOS Xe · Cisco

95%

3.3.0sg 3.3.1s 3.3.1sg 3.4.0as 3.4.0s 3.4.1s 3.4.2s 3.4.3s 3.4.xs 3.5.0s 3.5.1s 3.5.2s 3.5.xs

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (5)

VDB Entryx_refsource_OSVDBBroken Link

Source: [email protected]

http://osvdb.org/85816

Third Party Advisoryx_refsource_SECUNIANot Applicable

Source: [email protected]

http://secunia.com/advisories/50774

Vendor Advisoryx_refsource_CISCO

Source: [email protected]

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120926-cucm

Vendor Advisoryx_refsource_CISCO

Source: [email protected]

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120926-sip

VDB Entryx_refsource_BIDThird Party Advisory

Source: [email protected]

http://www.securityfocus.com/bid/55697

CVSS

7.8HIGH[email protected]

Confidentiality: NONE
Integrity: NONE
Availability: COMPLETE

Vector?

Quick Info

StatusMODIFIED

CWE

CWE-20

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card