CVE:CVE-2018-0409
CNNVD:CNNVD-201808-462
Cisco Unified Communications Manager IM & Presence Service（CUCM IM&P）和TelePresence Video Communication Server (VCS) and Expressway都是美国思科（Cisco）公司的产品。Cisco Unified Communications Manager IM and Presence Service（CUCM IM&P）是一个使用在呼叫处理组件中的基于CUCM的即时消息（IM）和状态显示平台。TelePresence Video Communication Server（VCS）and Expressway是一款网真视频通信服务器。
Cisco CUCM IM&P和TelePresence VCS and Expressway中的XCP Router服务存在输入验证漏洞。远程攻击者可通过TCP 7400端口向受影响的设备发送恶意的IPv4或IPv6数据包利用该漏洞造成拒绝服务（服务中断）。
solution:Upgrade cisco telepresence_video_communication_server to a higher version than x7.0.1,x7.2.4,x8.1,x8.2.2,x8.5,x8.6,x8.7,x8.8,x8.9,x8.10,x8.10.4,and avoid the version x7.0.1,x7.2.4,x8.1,x8.2.2,x8.5,x8.6,x8.7,x8.8,x8.9,x8.10,x8.10.4; Upgrade cisco unified_communications_manager_im_and_presence_service to a higher version than 11.5,11.5(1,and avoid the version 11.5,11.5(1)