VDB
CVE-2021-1478
CVE-2021-1478
PUBLISHED
CVSS 5.300000190734863 MEDIUM
A vulnerability in the Java Management Extensions (JMX) component of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected system. This vulnerability is due to an unsecured TCP/IP port. An attacker could exploit this vulnerability by accessing the port and restarting the JMX process. A successful exploit could allow the attacker to cause a DoS condition on an affected system.
EPSS 0.23% · 46.3th percentile
Risk Scores
CVSS 3.1
5.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
EPSS Score
0.23%
46.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| cisco | hosted_collaboration_mediation_fulfillment | 0 |
| cisco | unified_communications_manager | 0, 0 |
| Cisco | Cisco Unified Communications Manager | n/a |
Exploit Intelligence
Timeline
- May 6, 2021 CVE Published
- May 7, 2021 EPSS Score
- Jul 10, 2021 EPSS Score
- Sep 10, 2021 EPSS Score
- Nov 11, 2021 EPSS Score
- Jan 12, 2022 EPSS Score
- Feb 4, 2022 EPSS Score
- Mar 15, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- May 16, 2022 EPSS Score
- Jul 18, 2022 EPSS Score
- Sep 17, 2022 EPSS Score