CVE-2011-2564: High severity cisco unified communications solutions vulnerability
Unspecified vulnerability in the Service Advertisement Framework (SAF) in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 8.x before 8.5(1) and Cisco Intercompany Media Engine 8.x before 8.5(1) allows remote attackers to cause a denial of service (device reload) via crafted SAF packets, aka Bug ID CSCth19417.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-2564?
CVE-2011-2564 has a severity rating that indicates a denial of service vulnerability in Cisco Unified Communications Manager and Cisco Intercompany Media Engine.
How do I fix CVE-2011-2564?
To fix CVE-2011-2564, it is recommended to upgrade to Cisco Unified Communications Manager version 8.5(1) or later.
Which software versions are affected by CVE-2011-2564?
CVE-2011-2564 affects Cisco Unified Communications Manager versions 8.0(1) to 8.0(3) and Cisco Intercompany Media Engine versions prior to 8.5(1).
Can CVE-2011-2564 lead to remote attacks?
Yes, CVE-2011-2564 allows remote attackers to exploit the vulnerability and potentially cause the device to reload.
Is there a workaround for CVE-2011-2564 if I can't update immediately?
There are no specific workarounds for CVE-2011-2564, so the recommended action is to apply the security update as soon as possible.