CVE-2011-1606: High severity cisco unified communications solutions vulnerability

Published May 3, 2011

Updated

Unspecified vulnerability in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)su2, 7.x before 7.1(5)su1, 8.0 before 8.0(3), and 8.5 before 8.5(1) allows remote attackers to cause a denial of service (process failure) via a malformed SIP message, aka Bug ID CSCtg62855.

Affected Software

45 affected components

Cisco Unified Communications Manager=6.1\(3a\)

Cisco Unified Communications Manager=6.1\(2\)

Cisco Unified Communications Manager=6.1\(3b\)su1

Cisco Unified Communications Manager=6.1\(2\)su1a

Cisco Unified Communications Manager=6.1\(4\)su1

Cisco Unified Communications Manager=6.1\(4\)

Cisco Unified Communications Manager=6.1\(5\)su1

Cisco Unified Communications Manager=6.1\(4a\)

Cisco Unified Communications Manager=6.1\(3\)

Cisco Unified Communications Manager=6.1\(4a\)su2

Cisco Unified Communications Manager=6.1\(1\)

Cisco Unified Communications Manager=6.1\(1b\)

Cisco Unified Communications Manager=6.1\(3b\)

Cisco Unified Communications Manager=6.1\(5\)

Cisco Unified Communications Manager=6.1\(2\)su1

Cisco Unified Communications Manager=6.0

Cisco Unified Communications Manager=6.1\(1a\)

Cisco Unified Communications Manager=7.1\(2b\)

Cisco Unified Communications Manager=7.1\(3b\)

Cisco Unified Communications Manager=7.1\(2a\)su1

Cisco Unified Communications Manager=7.1\(3b\)su1

Cisco Unified Communications Manager=7.1\(3a\)su1a

Cisco Unified Communications Manager=7.1\(3\)

Cisco Unified Communications Manager=7.1\(2a\)

Cisco Unified Communications Manager=7.1\(5b\)

Cisco Unified Communications Manager=7.0\(2a\)

Cisco Unified Communications Manager=7.0\(1\)su1

Cisco Unified Communications Manager=7.0\(1\)su1a

Cisco Unified Communications Manager=7.1\(5\)

Cisco Unified Communications Manager=7.1\(5a\)

Cisco Unified Communications Manager=7.0\(2a\)su2

Cisco Unified Communications Manager=7.1\(5\)su1a

Cisco Unified Communications Manager=7.1\(5\)su1

Cisco Unified Communications Manager=7.1\(3a\)

Cisco Unified Communications Manager=7.0\(2a\)su1

Cisco Unified Communications Manager=7.1\(3a\)su1

Cisco Unified Communications Manager=7.0\(2\)

Cisco Unified Communications Manager=7.1\(3b\)su2

Cisco Unified Communications Manager=8.0\(2c\)

Cisco Unified Communications Manager=8.0\(3a\)su2

Cisco Unified Communications Manager=8.0\(3\)

Cisco Unified Communications Manager=8.5

Cisco Unified Communications Manager=8.0\(3a\)

Cisco Unified Communications Manager=8.0\(2c\)su1

Cisco Unified Communications Manager=8.0\(3a\)su1

Event History

May 3, 2011

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2011-1606?

CVE-2011-1606 has a severity rating that indicates it can lead to a denial of service via malformed SIP messages.

How do I fix CVE-2011-1606?

To mitigate CVE-2011-1606, upgrade Cisco Unified Communications Manager to a version that includes the relevant patches or updates that address this vulnerability.

Which versions of Cisco Unified Communications Manager are affected by CVE-2011-1606?

CVE-2011-1606 affects Cisco Unified Communications Manager versions 6.x before 6.1(5)su2, 7.x before 7.1(5)su1, 8.0 before 8.0(3), and 8.5 before 8.5(1).

Can CVE-2011-1606 be exploited remotely?

Yes, CVE-2011-1606 can be exploited by remote attackers through the sending of malformed SIP messages.

What are the potential impacts of CVE-2011-1606?

The exploitation of CVE-2011-1606 can cause the affected Cisco Unified Communications Manager process to fail, resulting in a denial of service.