CVE-2006-4032

no score yetEPSS 1.6%

Unspecified vulnerability in Cisco IOS CallManager Express (CME) allows remote attackers to gain sensitive information (user names) from the Session Initiation Protocol (SIP) user directory via certain SIP messages, aka bug CSCse92417.

EPSS: 1.6% chance of exploitation in the next 30 days; higher than 76% of CVEs (scores of 2026-10-31)
Published: 2006-08-09
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

cisco:callmanager_express

References

http://secunia.com/advisories/21335
http://securitytracker.com/id?1016627
http://www.blackhat.com/html/bh-usa-06/bh-usa-06-speakers.html#Endler
http://www.cisco.com/warp/public/707/cisco-sr-20060802-sip.shtml
http://www.osvdb.org/27760

Check your stack JSON