CVE-2009-2864

CVE-2009-2864 is a high-severity vulnerability in Cisco Unified Callmanager with a CVSS 2.0 base score of 7.8. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

• Severity: High (CVSS 2.0 base score 7.8)
• EPSS exploit prediction: 3% (85th percentile)
• Actively exploited: Not listed in CISA KEV
• Affected product: Cisco Unified Callmanager
• Published: 2009-09-28
• Last modified: 2026-06-16

Description

Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 5.x before 5.1(3g), 6.x before 6.1(4), 7.0.x before 7.0(2a)su1, and 7.1.x before 7.1(2) allows remote attackers to cause a denial of service (service restart) via malformed SIP messages, aka Bug ID CSCsz95423.

Frequently asked questions

What is CVE-2009-2864?

Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 5.x before 5.1(3g), 6.x before 6.1(4), 7.0.x before 7.0(2a)su1, and 7.1.x before 7.1(2) allows remote attackers to cause a denial of service (service restart) via malformed SIP messages, aka Bug ID CSCsz95423.

How severe is CVE-2009-2864?

CVE-2009-2864 has a CVSS 2.0 base score of 7.8, rated high severity.

Is CVE-2009-2864 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 3% (85th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2009-2864?

CVE-2009-2864 primarily affects Cisco Unified Callmanager. In total, 46 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2009-2864?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.

When was CVE-2009-2864 published?

CVE-2009-2864 was published on 2009-09-28 and last updated on 2026-06-16.

References

• http://osvdb.org/58344
• http://secunia.com/advisories/36836
• http://tools.cisco.com/security/center/viewAlert.x?alertId=18883
• http://www.cisco.com/en/US/products/products_security_advisory09186a0080af8118.shtml
• http://www.securityfocus.com/bid/36496
• http://www.securitytracker.com/id?1022931
• http://www.vupen.com/english/advisories/2009/2757
• https://exchange.xforce.ibmcloud.com/vulnerabilities/53447

Affected products (46)

• cpe:2.3:a:cisco:unified_callmanager:5.0\(1\):*:*:*:*:*:*:*
• cpe:2.3:a:cisco:unified_callmanager:5.0\(2\):*:*:*:*:*:*:*
• cpe:2.3:a:cisco:unified_callmanager:5.0\(2a\):*:*:*:*:*:*:*
• cpe:2.3:a:cisco:unified_callmanager:5.0\(3\):*:*:*:*:*:*:*
• cpe:2.3:a:cisco:unified_callmanager:5.0\(3a\):*:*:*:*:*:*:*
• cpe:2.3:a:cisco:unified_callmanager:5.0\(4\):*:*:*:*:*:*:*
• cpe:2.3:a:cisco:unified_callmanager:5.0\(4a\):*:*:*:*:*:*:*
• cpe:2.3:a:cisco:unified_callmanager:5.0\(4c\):*:*:*:*:*:*:*
• cpe:2.3:a:cisco:unified_callmanager:5.1:*:*:*:*:*:*:*
• cpe:2.3:a:cisco:unified_callmanager:5.1\(1\):*:*:*:*:*:*:*
• cpe:2.3:a:cisco:unified_callmanager:5.1\(1a\):*:*:*:*:*:*:*
• cpe:2.3:a:cisco:unified_callmanager:5.1\(1c\):*:*:*:*:*:*:*
• cpe:2.3:a:cisco:unified_callmanager:5.1\(2\):*:*:*:*:*:*:*
• cpe:2.3:a:cisco:unified_callmanager:5.1\(2a\):*:*:*:*:*:*:*
• cpe:2.3:a:cisco:unified_callmanager:5.1\(2b\):*:*:*:*:*:*:*
• cpe:2.3:a:cisco:unified_callmanager:5.1\(3\):*:*:*:*:*:*:*
• cpe:2.3:a:cisco:unified_callmanager:5.1\(3a\):*:*:*:*:*:*:*
• cpe:2.3:a:cisco:unified_callmanager:5.1\(3b\):*:*:*:*:*:*:*
• cpe:2.3:a:cisco:unified_callmanager:5.1\(3c\):*:*:*:*:*:*:*
• cpe:2.3:a:cisco:unified_callmanager:6.0\(1\):*:*:*:*:*:*:*
• cpe:2.3:a:cisco:unified_callmanager:6.0\(1a\):*:*:*:*:*:*:*
• cpe:2.3:a:cisco:unified_callmanager:6.0\(1b\):*:*:*:*:*:*:*
• cpe:2.3:a:cisco:unified_callmanager:6.1:*:*:*:*:*:*:*
• cpe:2.3:a:cisco:unified_callmanager:6.1\(1\):*:*:*:*:*:*:*
• cpe:2.3:a:cisco:unified_callmanager:6.1\(1a\):*:*:*:*:*:*:*
• cpe:2.3:a:cisco:unified_callmanager:6.1\(1b\):*:*:*:*:*:*:*
• cpe:2.3:a:cisco:unified_callmanager:6.1\(2\):*:*:*:*:*:*:*
• cpe:2.3:a:cisco:unified_communications_manager:5.1\(1b\):*:*:*:*:*:*:*
• cpe:2.3:a:cisco:unified_communications_manager:5.1\(1c\):*:*:*:*:*:*:*
• cpe:2.3:a:cisco:unified_communications_manager:5.1\(2\):*:*:*:*:*:*:*
• cpe:2.3:a:cisco:unified_communications_manager:5.1\(2a\):*:*:*:*:*:*:*
• cpe:2.3:a:cisco:unified_communications_manager:5.1\(3\):*:*:*:*:*:*:*
• cpe:2.3:a:cisco:unified_communications_manager:5.1\(3a\):*:*:*:*:*:*:*
• cpe:2.3:a:cisco:unified_communications_manager:5.1\(3c\):*:*:*:*:*:*:*
• cpe:2.3:a:cisco:unified_communications_manager:5.1\(3d\):*:*:*:*:*:*:*
• cpe:2.3:a:cisco:unified_communications_manager:5.1\(3e\):*:*:*:*:*:*:*
• cpe:2.3:a:cisco:unified_communications_manager:6.1\(1\):*:*:*:*:*:*:*
• cpe:2.3:a:cisco:unified_communications_manager:6.1\(1a\):*:*:*:*:*:*:*
• cpe:2.3:a:cisco:unified_communications_manager:6.1\(1b\):*:*:*:*:*:*:*
• cpe:2.3:a:cisco:unified_communications_manager:6.1\(2\):*:*:*:*:*:*:*

More vulnerabilities in Cisco Unified Callmanager

• CVE-2008-0027 — Critical (CVSS 10.0): Heap-based buffer overflow in the Certificate Trust List (CTL) Provider service (CTLProvider.exe) in Cisco Unified…
• CVE-2007-5538 — Critical (CVSS 10.0): Buffer overflow in the Centralized TFTP File Locator Service in Cisco Unified Communications Manager (CUCM, formerly…
• CVE-2006-5278 — Critical (CVSS 10.0): Integer overflow in the Real-Time Information Server (RIS) Data Collector service (RisDC.exe) in Cisco Unified…
• CVE-2006-5277 — Critical (CVSS 9.3): Off-by-one error in the Certificate Trust List (CTL) Provider service (CTLProvider.exe) in Cisco Unified Communications…
• CVE-2008-1744 — High (CVSS 7.8): The Certificate Authority Proxy Function (CAPF) service in Cisco Unified Communications Manager (CUCM) 4.1 before…
• CVE-2007-5537 — High (CVSS 7.8): Cisco Unified Communications Manager (CUCM, formerly CallManager) 5.1 before 5.1(2), and Unified CallManager 5.0, allow…

All CVEs affecting Cisco Unified Callmanager →