Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2019-1845: Cisco TelePresence and Unified CM IM&P authentication can stop logins

CVE-2019-1845 · published 7 years ago

Summary

The login service in Cisco TelePresence Video Communication Server and the Cisco Unified Communications Manager IM and Presence service can be forced to restart by a specially crafted login request. This causes a temporary denial of service for users trying to sign in, while users already logged in are unaffected. Apply the vendor’s security update or patch to fix the issue.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
cisco	telepresence_video_communication_server	>= x8.1, <= x12.5.2 `cpe:2.3:a:cisco:telepresence_video_communication_server::::::::`
cisco	unified_communications_manager_im_and_presence_service	11.5\(1\) `cpe:2.3:a:cisco:unified_communications_manager_im_and_presence_service:11.5\(1\):::::::*`

Original advisory text

A vulnerability in the authentication service of the Cisco Unified Communications Manager IM and Presence (Unified CM IM&P) Service, Cisco TelePresence Video Communication Server (VCS), and Cis...

A vulnerability in the authentication service of the Cisco Unified Communications Manager IM and Presence (Unified CM IM&P) Service, Cisco TelePresence Video Communication Server (VCS), and Cisco Expressway Series could allow an unauthenticated, remote attacker to cause a service outage for users attempting to authenticate, resulting in a denial of service (DoS) condition. The vulnerability is due to insufficient controls for specific memory operations. An attacker could exploit this vulnerability by sending a malformed Extensible Messaging and Presence Protocol (XMPP) authentication request to an affected system. A successful exploit could allow the attacker to cause an unexpected restart of the authentication service, preventing users from successfully authenticating. Exploitation of this vulnerability does not impact users who were authenticated prior to an attack.

References

http://www.securityfocus.com/bid/108615 Third Party Advisory VDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-2... Vendor Advisory

Fix within

Internet-facing 14 days

Internal 60 days

Not known to be exploited
Can be exploited automatically
Gives an attacker partial control

Severity

8.6 High

Exploitation

5% chance of attack within 30 days

Type

CWE-20Improper Input Validation

Timeline

Published5 Jun 2019

Updated30 Oct 2026

First seen29 Sep 2026

Sources

CVE-2019-1845 · NVD

Track software like this

Free during beta