CVE-2009-2864: Cisco Unified Callmanager

High severity, CVSS 7.8. EPSS: 2.9% chance of exploitation in the next 30 days.

Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 5.x before 5.1(3g), 6.x before 6.1(4), 7.0.x before 7.0(2a)su1, and 7.1.x before 7.1(2) allows remote attackers to cause a denial of service (service restart) via malformed SIP messages, aka Bug ID CSCsz95423.

Affected products

• Cisco Unified Callmanager: version 5.0(1) only; version 5.0(2) only; version 5.0(2a) only; version 5.0(3) only; version 5.0(3a) only; version 5.0(4) only; …
• Cisco Unified Communications Manager: version 5.1(1b) only; version 5.1(1c) only; version 5.1(2) only; version 5.1(2a) only; version 5.1(3) only; version 5.1(3a) only; …

Published 2009-09-28. Last modified 2026-06-16.