Description
The Mobile and Remote Access (MRA) services implementation in Cisco Unified Communications Manager mishandles edge-device identity validation, which allows remote attackers to bypass intended call-reception and call-setup restrictions by spoofing a user, aka Bug ID CSCuu97283.
References
- 1034377 vdb-entry
- 20151209 Cisco Unified Communications Manager Mobile and Remote Access Services Identity Attack Vulnerability vendor-advisory
- 78741 vdb-entry