CVE-2009-0057: Cisco Unified Communications Manager

Medium severity, CVSS 4.3. EPSS: 0.9% chance of exploitation in the next 30 days.

The Certificate Authority Proxy Function (CAPF) service in Cisco Unified Communications Manager 5.x before 5.1(3e) and 6.x before 6.1(3) allows remote attackers to cause a denial of service (voice service outage) by sending malformed input over a TCP session in which the "client terminates prematurely."

Affected products

• Cisco Unified Communications Manager: version 5.0 only; version 5.0_1 only; version 5.0_2 only; version 5.0_3 only; version 5.0_3a only; version 5.0_4 only; …

Published 2009-01-22. Last modified 2026-06-16.