Cisco releases patches for VoIP products

Cisco Security has released patches for vulnerabilities in its VoIP products.

VoIPshield Laboratories identified the vulnerabilities in Cisco’s Unified Communications Manager versions 5.x and 6.x, and in its Call Manager 4.x.

The vulnerabilities could lead to unauthorised access and denial of service (DoS) attacks.

The Cisco Unified Communications Manager (CUCM) was found to contain a flaw in its Computer Telephony Integration (CTI) Manager, which could allow a DoS attack.

In Cisco’s Real-Time Information Server (RIS) Data Collector, an authentication bypass hole could give hackers access to information they could use to mount other attacks.

Cisco has now issued patches for both of these issues at no extra charge to customers with service contracts.