Skip to content
fr Sign in
6.8 Medium

CVE-2020-3163 A vulnerability in the Live Data server of Cisco Unified Contact Center Enterprise could allow an unauthenticated,…

Description

A vulnerability in the Live Data server of Cisco Unified Contact Center Enterprise could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability exists because the affected software improperly manages resources when processing inbound Live Data traffic. An attacker could exploit this vulnerability by sending multiple crafted Live Data packets to an affected device. A successful exploit could cause the affected device to run out of buffer resources, which could result in a stack overflow and cause the affected device to reload, resulting in a DoS condition. Note: The Live Data port in Cisco Unified Contact Center Enterprise devices allows only a single TCP connection. To exploit this vulnerability, an attacker would have to send crafted packets to an affected device before a legitimate Live Data client establishes a connection.

Affected products and versions

Product Affected versions Fixed in
Cisco Unified Contact Center Enterprise Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Cisco Unified Contact Center Enterprise

The 11 CVEs of Cisco Unified Contact Center Enterprise →
CVE-2026-20314 A vulnerability in Cisco Packaged Contact Center Enterprise (Packaged CCE) and Cisco Unified Contact Center Enterprise… 5.0 Medium CVE-2026-20109 Multiple vulnerabilities in the web-based management interface of Cisco Packaged Contact Center Enterprise (Packaged… 4.8 Medium CVE-2026-20055 Multiple vulnerabilities in the web-based management interface of Cisco Packaged Contact Center Enterprise (Packaged… 4.8 Medium CVE-2025-20377 A vulnerability in the API subsystem of Cisco Unified Intelligence Center could allow an authenticated, remote… 4.3 Medium
Track this CVE