CVE-2024-20375Disclosure(cisco / unified_communications_manager)

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability in the SIP call processing function of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper parsing of SIP messages. An attacker could exploit this vulnerability by sending a crafted SIP message to an affected Cisco Unified CM or Cisco Unified CM SME device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition that interrupts the communications of reliant voice and video devices.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-787

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • unified_communications_manager

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • 1 total mentions across 1 day

Affected systems

Vendors
Products
unified_communications_manager

16 versions affected across 1 product

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-04-21: 1Technical Details · 2026-04-21: 104-21
Signal classification1 categories
Disclosure
1100.0%
Referenced assets1 URL
Full discourse1 post
  • DailyCVE@dailycve
    Disclosure

    🟠 #Cisco Catalyst SD-WAN Manager, Arbitrary File Overwrite, #CVE-2024-20375 (Medium) https://dailycve.com/cisco-catalyst-sd-wan-manager-arbitrary-file-overwrite-cve-2024-20375-medium/

    Post summary

    The text announces Cisco Catalyst SD‑WAN Manager CVE‑2024‑20375 as a medium‑severity arbitrary file overwrite vulnerability, without providing PoC, exploit code, active usage evidence, or patch details.

    0000096
    183 followersView on X
CPE platform detail16 entries

16 of 16 entries

PartVendorProductVersionTarget SWTarget HW
Appciscounified_communications_manager12.0\(1\)su1--
Appciscounified_communications_manager12.0\(1\)su2--
Appciscounified_communications_manager12.0\(1\)su3--
Appciscounified_communications_manager12.0\(1\)su4--
Appciscounified_communications_manager12.0\(1\)su5--
Appciscounified_communications_manager12.5\(1\)--
Appciscounified_communications_manager12.5\(1\)su1--
Appciscounified_communications_manager12.5\(1\)su2--
Appciscounified_communications_manager12.5\(1\)su3--
Appciscounified_communications_manager12.5\(1\)su4--
Appciscounified_communications_manager12.5\(1\)su5--
Appciscounified_communications_manager12.5\(1\)su6--
Appciscounified_communications_manager12.5\(1\)su7--
Appciscounified_communications_manager12.5\(1\)su7a--
Appciscounified_communications_manager12.5\(1\)su8--
Appciscounified_communications_manager12.5\(1\)su8a--

Explore more