CVE-2015-0615: Cisco Unity Connection

High severity, CVSS 7.1. EPSS: 1.7% chance of exploitation in the next 30 days.

The call-handling implementation in Cisco Unity Connection 8.5 before 8.5(1)SU7, 8.6 before 8.6(2a)SU4, 9.x before 9.1(2)SU2, and 10.0 before 10.0(1)SU1, when SIP trunk integration is enabled, allows remote attackers to cause a denial of service (port consumption) by improperly terminating SIP sessions, aka Bug ID CSCul28089.

Affected products

• Cisco Unity Connection: version 8.5(1) only; version 8.5(1)su1 only; version 8.5(1)su2 only; version 8.5(1)su3 only; version 8.5(1)su4 only; version 8.5(1)su5 only; …

Published 2015-04-03. Last modified 2026-06-17.