CVE-2013-1134: Cisco Unified Communications Manager

High severity, CVSS 7.1. EPSS: 1.3% chance of exploitation in the next 30 days.

The Location Bandwidth Manager (LBM) Intracluster-communication feature in Cisco Unified Communications Manager (CUCM) 9.x before 9.1(1) does not require authentication from the remote LBM Hub node, which allows remote attackers to conduct cache-poisoning attacks against transaction records, and cause a denial of service (bandwidth-pool consumption and call outage), via unspecified vectors, aka Bug ID CSCub28920.

Affected products

• Cisco Unified Communications Manager: version 9.0(1) only

Published 2013-02-27. Last modified 2026-06-16.