TI-2007-01750 Aliases CVE-2007-1826 GHSA-vpg3-cpxr-xmc5

Unspecified vulnerability in the IPSec Manager Service for Cisco Unified CallManager…

LOW 38Published 2007-04-02 · Updated 2024-08-07

Key facts

Attack vector: Network
Privileges required: None
User interaction: — Not recorded in CVSS 2.0
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: None · None · Complete
Fix status: No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

Unspecified vulnerability in the IPSec Manager Service for Cisco Unified CallManager (CUCM) 5.0 before 5.0(4a)SU1 and Cisco Unified Presence Server (CUPS) 1.0 before 1.0(3) allows remote attackers to cause a denial of service (loss of cluster services) via a "specific UDP packet" to UDP port 8500, aka bug ID CSCsg60949.

Why it matters now

EPSS 0.02042 81st percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 9

CPE	Versions	Role	Vendor
cpe:2.3:a:cisco:unified_callmanager:5.0:::::::*	5.0	Vulnerable	Cisco
cpe:2.3:a:cisco:unified_callmanager:5.0\(1\):::::::*	5.0(1)	Vulnerable	Cisco
cpe:2.3:a:cisco:unified_callmanager:5.0\(2\):::::::*	5.0(2)	Vulnerable	Cisco
cpe:2.3:a:cisco:unified_callmanager:5.0\(3\):::::::*	5.0(3)	Vulnerable	Cisco
cpe:2.3:a:cisco:unified_callmanager:5.0\(3a\):::::::*	5.0(3a)	Vulnerable	Cisco
cpe:2.3:a:cisco:unified_callmanager:5.0\(4\):::::::*	5.0(4)	Vulnerable	Cisco
cpe:2.3:a:cisco:unified_presence_server:1.0:::::::*	1.0	Vulnerable	Cisco
cpe:2.3:a:cisco:unified_presence_server:1.0\(1\):::::::*	1.0(1)	Vulnerable	Cisco
cpe:2.3:a:cisco:unified_presence_server:1.0\(2\):::::::*	1.0(2)	Vulnerable	Cisco

cpe:2.3:a:cisco:unified_callmanager:5.0:*:*:*:*:*:*:* Versions 5.0 Vulnerable ·Cisco
cpe:2.3:a:cisco:unified_callmanager:5.0\(1\):*:*:*:*:*:*:* Versions 5.0(1) Vulnerable ·Cisco
cpe:2.3:a:cisco:unified_callmanager:5.0\(2\):*:*:*:*:*:*:* Versions 5.0(2) Vulnerable ·Cisco
cpe:2.3:a:cisco:unified_callmanager:5.0\(3\):*:*:*:*:*:*:* Versions 5.0(3) Vulnerable ·Cisco
cpe:2.3:a:cisco:unified_callmanager:5.0\(3a\):*:*:*:*:*:*:* Versions 5.0(3a) Vulnerable ·Cisco
cpe:2.3:a:cisco:unified_callmanager:5.0\(4\):*:*:*:*:*:*:* Versions 5.0(4) Vulnerable ·Cisco
cpe:2.3:a:cisco:unified_presence_server:1.0:*:*:*:*:*:*:* Versions 1.0 Vulnerable ·Cisco
cpe:2.3:a:cisco:unified_presence_server:1.0\(1\):*:*:*:*:*:*:* Versions 1.0(1) Vulnerable ·Cisco
cpe:2.3:a:cisco:unified_presence_server:1.0\(2\):*:*:*:*:*:*:* Versions 1.0(2) Vulnerable ·Cisco

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2007-1826
2026-10-03 Alias added: GHSA-vpg3-cpxr-xmc5

References

Patch 1

20070328 Multiple Cisco Unified CallManager and Presence Server Denial of Service Vulnerabilities

Other 2

TI-2008-00019 Heap-based buffer overflow in the Certificate Trust List (CTL) Provider service… CVSS 2.0HIGH 10.0
TI-2006-05092 Integer overflow in the Real-Time Information Server (RIS) Data Collector service… CVSS 2.0HIGH 10.0
TI-2006-05091 Off-by-one error in the Certificate Trust List (CTL) Provider service (CTLProvider.exe)… CVSS 2.0HIGH 9.3
TI-2007-05323 Buffer overflow in the Centralized TFTP File Locator Service in Cisco Unified… CVSS 2.0HIGH 10.0
TI-2006-05364 Cisco Security Agent (CSA) for Linux 4.5 before 4.5.1.657 and 5.0 before 5.0.0.193, as… CVSS 2.0HIGH 7.8
TI-2009-02727 Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 5.x before 5.1(3g)… CVSS 2.0HIGH 7.8

See all 17 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences