CVE-2020-27121 Cisco Unified Communications Manager IM and Presence Service Denial of Service Vulnerability
An authenticated remote attacker can crash the authentication service via crafted login requests, causing a denial of service for new logins.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-27121?
CVE-2020-27121 is a medium-severity denial of service vulnerability in Cisco Unified Communications Manager IM and Presence Service, published on 6 Nov 2020. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
A vulnerability in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) Software could allow an authenticated, remote attacker to cause the Cisco XCP Authentication Service on an affected device to restart, resulting in a denial of service (DoS) condition. The vulnerability is due to improper handling of login requests. An attacker could exploit this vulnerability by sending a crafted client login request to an affected device. A successful exploit could allow the attacker to cause a process to crash, resulting in a DoS condition for new login attempts. Users who are authenticated at the time of the attack would not be affected. There are workarounds that address this vulnerability.
Which versions are affected by CVE-2020-27121?
It affects 1 product.
Products include Cisco Unified Communications Manager Im and Presence Service.
How do I fix CVE-2020-27121?
No fix has been published for CVE-2020-27121 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2020-27121 being exploited?
There is no known exploitation of CVE-2020-27121 in the wild and no public exploit code.
Other vulnerabilities in Cisco Unified Communications Manager IM and Presence Service
- CVE-2018-0363 Cross-site request forgery in Cisco Unified Communications Manager IM & Presence Service unknown
- CVE-2023-20108 Denial of service in Cisco Unified Communications Manager IM and Presence Service
- CVE-2016-6464 Information disclosure in Cisco Unified Communications Manager
- CVE-2016-1466 Denial of service in n/a
- CVE-2021-1363 Cisco Unified Communications Manager IM & Presence Service SQL Injection Vulnerabilities
Sources
Also known as GHSA-7c3f-h49g-4mg6.