Is CVE-2024-20375 actively exploited?

CVE-2024-20375 has no public evidence of in-the-wild exploitation as of 2025-08-01.

What is the CVSS score for CVE-2024-20375?

CVE-2024-20375 has a CVSS score of 8.6 (HIGH severity). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H.

How do I patch CVE-2024-20375?

Patch guidance is available from cisco security advisories. CVEDatabase generates AI-assisted remediation guidance on demand for CVE-2024-20375.

Fix CVE-2024-20375 - HIGH | CVEDatabase.com

Q: Which products are affected by CVE-2024-20375?

16 products: cisco unified communications manager, cisco unified communications manager, cisco unified communications manager, cisco unified communications manager, cisco unified communications manager, and 11 more.

Description

A vulnerability in the SIP call processing function of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper parsing of SIP messages. An attacker could exploit this vulnerability by sending a crafted SIP message to an affected Cisco Unified CM or Cisco Unified CM SME device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition that interrupts the communications of reliant voice and video devices.

CVSS Metrics

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Attack Vector: network
Complexity: low
Privileges: none
User Action: none
Scope: changed
Confidentiality: none
Integrity: none
Availability: high
Weaknesses: CWE-787 · Out-of-bounds Write

Metadata

Primary Vendor: CISCO
Published: 8/21/2024
Last Modified: 8/1/2025
Source: NIST NVD
Note: Verify all details with official vendor sources before applying patches.

Affected Products

cisco : unified_communications_managercisco : unified_communications_managercisco : unified_communications_managercisco : unified_communications_managercisco : unified_communications_managercisco : unified_communications_managercisco : unified_communications_managercisco : unified_communications_managercisco : unified_communications_managercisco : unified_communications_managercisco : unified_communications_managercisco : unified_communications_managercisco : unified_communications_managercisco : unified_communications_managercisco : unified_communications_managercisco : unified_communications_manager

Remediation Guidance

Executive Summary

Cite this page

CVE-2024-20375. CVEDatabase.com. Retrieved 1 May 2026. https://cvedatabase.com/cve/CVE-2024-20375

View on NIST NVD

CVE-2024-20375 vulnerability