CVE-2015-0591

MediumCVSS 5.0/10Last modified Jun 17, 2026

Description

Cisco Unified Communications Domain Manager (UCDM) 10 allows remote attackers to cause a denial of service (daemon hang and GUI outage) via a flood of malformed TCP packets, aka Bug ID CSCur44177.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:N/A:P

Weakness enumeration

CWE-399

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0591Vendor Advisory
http://www.securityfocus.com/bid/72084Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1031561Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/100661
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0591Vendor Advisory
http://www.securityfocus.com/bid/72084Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1031561Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/100661

Timeline

Published: Jan 15, 2015
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2015

CVE-2015-05927.8The Zone-Based Firewall implementation in Cisco IOS 15.4(2)T3 and earlier allows remote attackers to cause a denial of service (device reloa CVE-2015-05937.1The Zone-Based Firewall implementation in Cisco IOS 12.4(122)T and earlier does not properly manage session-object structures, which allows CVE-2015-05944.3Multiple cross-site scripting (XSS) vulnerabilities in the help pages in Cisco Common Services, as used in Cisco Prime LAN Management Soluti CVE-2015-05955.0The XMLAPI in Cisco WebEx Meetings Server 1.5(.1.131) and earlier allows remote attackers to obtain sensitive information by reading return CVE-2015-05966.8Cross-site request forgery (CSRF) vulnerability in Cisco WebEx Meetings Server 1.5(.1.131) and earlier allows remote attackers to hijack the CVE-2015-05975.0The Forgot Password feature in Cisco WebEx Meetings Server 1.5(.1.131) and earlier allows remote attackers to enumerate administrative accou CVE-2015-05986.8The RADIUS implementation in Cisco IOS and IOS XE allows remote attackers to cause a denial of service (device reload) via crafted IPv6 Attr CVE-2015-05994.3The web interface in Cisco Integrated Management Controller in Cisco Unified Computing System (UCS) on C-Series Rack Servers does not proper CVE-2015-06005.0The mobility extension on Cisco Unified IP 9900 phones with firmware 9.4(.1) and earlier allows remote attackers to cause a denial of servic CVE-2015-06014.6Cisco Unified IP 9900 phones with firmware 9.4(.1) and earlier allow local users to cause a denial of service (device reload) via crafted co CVE-2015-06025.0The mobility extension on Cisco Unified IP 9900 phones with firmware 9.4(.1) and earlier allows remote attackers to obtain sensitive informa CVE-2015-06034.6Cisco Unified IP 9900 phones with firmware 9.4(.1) and earlier use weak permissions for unspecified files, which allows local users to cause