CVE-2011-2562: High severity Cisco Unified Communications Manager vulnerability

Published Aug 29, 2011

Updated

Unspecified vulnerability in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)su2, 7.x before 7.1(5b)su3, 8.x before 8.0(3a)su1, and 8.5 before 8.5(1) allows remote attackers to cause a denial of service (service outage) via a SIP INVITE message, aka Bug ID CSCth43256.

Affected Software

48 affected components

Cisco Unified Communications Manager=6.1\(3a\)

Cisco Unified Communications Manager=8.0\(2c\)

Cisco Unified Communications Manager=6.1\(2\)

Cisco Unified Communications Manager=6.1\(3b\)su1

Cisco Unified Communications Manager=7.1\(2b\)su1

Cisco Unified Communications Manager=7.1\(2b\)

Cisco Unified Communications Manager=6.1\(2\)su1a

Cisco Unified Communications Manager=7.1\(3b\)

Cisco Unified Communications Manager=6.1\(4\)su1

Cisco Unified Communications Manager=6.1\(4\)

Cisco Unified Communications Manager=7.1\(2a\)su1

Cisco Unified Communications Manager=7.1\(3b\)su1

Cisco Unified Communications Manager=7.1\(3a\)su1a

Cisco Unified Communications Manager=7.1\(5b\)su1

Cisco Unified Communications Manager=6.1\(5\)su1

Cisco Unified Communications Manager=6.1\(4a\)

Cisco Unified Communications Manager=6.1\(3\)

Cisco Unified Communications Manager=7.1\(3\)

Cisco Unified Communications Manager=6.1\(4a\)su2

Cisco Unified Communications Manager=7.1\(2a\)

Cisco Unified Communications Manager=6.1\(1\)

Cisco Unified Communications Manager=7.1\(5b\)

Cisco Unified Communications Manager=7.0\(2a\)

Cisco Unified Communications Manager=8.0

Cisco Unified Communications Manager=7.0\(1\)su1

Cisco Unified Communications Manager=7.0\(1\)su1a

Cisco Unified Communications Manager=7.1\(5b\)su2

Cisco Unified Communications Manager=7.1\(5\)

Cisco Unified Communications Manager=7.1\(5a\)

Cisco Unified Communications Manager=6.1\(1b\)

Cisco Unified Communications Manager=6.1\(3b\)

Cisco Unified Communications Manager=7.0\(2a\)su2

Cisco Unified Communications Manager=6.1\(5\)

Cisco Unified Communications Manager=8.0\(3\)

Cisco Unified Communications Manager=7.1\(5b\)su1a

Cisco Unified Communications Manager=7.1\(5\)su1a

Cisco Unified Communications Manager=8.5

Cisco Unified Communications Manager=7.1\(5\)su1

Cisco Unified Communications Manager=8.0\(3a\)

Cisco Unified Communications Manager=7.1\(3a\)

Cisco Unified Communications Manager=6.1\(2\)su1

Cisco Unified Communications Manager=7.0\(2a\)su1

Cisco Unified Communications Manager=7.1\(3a\)su1

Cisco Unified Communications Manager=6.0

Cisco Unified Communications Manager=8.0\(2c\)su1

Cisco Unified Communications Manager=6.1\(1a\)

Cisco Unified Communications Manager=7.0\(2\)

Cisco Unified Communications Manager=7.1\(3b\)su2

Event History

Aug 29, 2011

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2011-2562?

CVE-2011-2562 is considered a high-severity vulnerability that can lead to a denial of service.

Which versions of Cisco Unified Communications Manager are affected by CVE-2011-2562?

CVE-2011-2562 affects several versions including 6.x before 6.1(5)su2, 7.x before 7.1(5b)su3, 8.x before 8.0(3a)su1, and 8.5 before 8.5(1).

How do I fix CVE-2011-2562?

To fix CVE-2011-2562, upgrade to a fixed version of Cisco Unified Communications Manager as specified in the Cisco advisory.

What type of attack does CVE-2011-2562 facilitate?

CVE-2011-2562 can be exploited by remote attackers sending specially crafted SIP INVITE messages.

What impact does CVE-2011-2562 have on systems?

CVE-2011-2562 can cause a denial of service, leading to service outages in affected systems.