CVE-2011-2563: High severity cisco unified communications solutions vulnerability

Published Aug 29, 2011

Updated

Unspecified vulnerability in the Service Advertisement Framework (SAF) in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 8.x before 8.5(1) and Cisco Intercompany Media Engine 8.x before 8.5(1) allows remote attackers to cause a denial of service (device reload) via crafted SAF packets, aka Bug ID CSCth26669.

Affected Software

11 affected components

Cisco Unified Communications Manager=8.0\(2c\)

Cisco Unified Communications Manager=8.0\(3a\)su2

Cisco Unified Communications Manager=8.0

Cisco Unified Communications Manager=8.0\(3\)

Cisco Unified Communications Manager=8.5

Cisco Unified Communications Manager=8.0\(3a\)

Cisco Unified Communications Manager=8.0\(2c\)su1

Cisco Unified Communications Manager=8.0\(1\)

Cisco Unified Communications Manager=8.0\(3a\)su1

Cisco Intercompany Media Engine=8.0\(3\)

Cisco Intercompany Media Engine=8.0\(2\)

Event History

Aug 29, 2011

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2011-2563?

CVE-2011-2563 has been classified as a high severity vulnerability due to its potential to cause denial of service.

How do I fix CVE-2011-2563?

To mitigate CVE-2011-2563, upgrade Cisco Unified Communications Manager or Cisco Intercompany Media Engine to version 8.5(1) or later.

What type of vulnerability is CVE-2011-2563?

CVE-2011-2563 is an unspecified denial of service vulnerability affecting Cisco Unified Communications Manager and Intercompany Media Engine.

Which versions are affected by CVE-2011-2563?

CVE-2011-2563 affects Cisco Unified Communications Manager versions 8.x before 8.5(1) and Intercompany Media Engine versions 8.x before 8.5(1).

Can CVE-2011-2563 be exploited remotely?

Yes, CVE-2011-2563 can be exploited remotely by attackers to cause device reloads.