CVE-2011-2563

Unspecified vulnerability in the Service Advertisement Framework (SAF) in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 8.x before 8.5(1) and Cisco Intercompany Media Engine 8.x before 8.5(1) allows remote attackers to cause a denial of service (device reload) via crafted SAF packets, aka Bug ID CSCth26669.

CVSS v2.0 7.8 HIGH

7.8^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability : 10.0 / Impact : 6.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

References

Link	Resource
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b8f531.shtml	Vendor Advisory
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b8f533.shtml	Vendor Advisory
http://www.securitytracker.com/id?1025969

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:cisco:unified_communications_manager:8.0:::::::*
	cpe:2.3:a:cisco:unified_communications_manager:8.0\(1\):::::::*
	cpe:2.3:a:cisco:unified_communications_manager:8.0\(2c\):::::::*
	cpe:2.3:a:cisco:unified_communications_manager:8.0\(2c\)su1:::::::*
	cpe:2.3:a:cisco:unified_communications_manager:8.0\(3\):::::::*
	cpe:2.3:a:cisco:unified_communications_manager:8.0\(3a\):::::::*
	cpe:2.3:a:cisco:unified_communications_manager:8.0\(3a\)su1:::::::*
	cpe:2.3:a:cisco:unified_communications_manager:8.0\(3a\)su2:::::::*
	cpe:2.3:a:cisco:unified_communications_manager:8.5:::::::*

Configuration 2 (hide)

OR	cpe:2.3:a:cisco:intercompany_media_engine:8.0\(2\):::::::*
	cpe:2.3:a:cisco:intercompany_media_engine:8.0\(3\):::::::*

History

No history.

Information

Published : 2011-08-29 15:55

Updated : 2023-12-10 11:03

NVD link : CVE-2011-2563

Mitre link : CVE-2011-2563

CVE.ORG link : CVE-2011-2563

JSON object : View

Products Affected

cisco

unified_communications_manager
intercompany_media_engine

CWE

NVD-CWE-noinfo

{"id": "CVE-2011-2563", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 6.9, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2011-08-29T15:55:01.300", "references": [{"url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b8f531.shtml", "tags": ["Vendor Advisory"], "source": "ykramarz@cisco.com"}, {"url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b8f533.shtml", "tags": ["Vendor Advisory"], "source": "ykramarz@cisco.com"}, {"url": "http://www.securitytracker.com/id?1025969", "source": "ykramarz@cisco.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in the Service Advertisement Framework (SAF) in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 8.x before 8.5(1) and Cisco Intercompany Media Engine 8.x before 8.5(1) allows remote attackers to cause a denial of service (device reload) via crafted SAF packets, aka Bug ID CSCth26669."}, {"lang": "es", "value": "Vulnerabilidad no especificada en el Service Advertisement Framework (SAF) en Cisco Unified Communications Manager (tambi\u00e9n conocido como CUCM, CallManager) v8.xantes de v8.5(1) y Cisco Intercompany Media Engine v8.x antes de v8.5(1) permite a atacantes remotos provocar una denegaci\u00f3n de servicio (reinicio del dispositivo) a trav\u00e9s de paquetes SAF modificados, tambi\u00e9n conocido como Bug ID CSCth26669"}], "lastModified": "2011-10-06T02:50:14.597", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cisco:unified_communications_manager:8.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "248E4608-B870-4913-8048-3771685CBD77"}, {"criteria": "cpe:2.3:a:cisco:unified_communications_manager:8.0\\(1\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "52D7EECA-322E-48E4-9682-6C3C39B64B9A"}, {"criteria": "cpe:2.3:a:cisco:unified_communications_manager:8.0\\(2c\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C09FE52A-E0AF-4B0F-A44E-4362E26A88D9"}, {"criteria": "cpe:2.3:a:cisco:unified_communications_manager:8.0\\(2c\\)su1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A9AD0704-6F85-4E64-88D4-73E8BB2BEF4E"}, {"criteria": "cpe:2.3:a:cisco:unified_communications_manager:8.0\\(3\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "07EF7BE6-2702-4174-A8AA-AFD44014F8A7"}, {"criteria": "cpe:2.3:a:cisco:unified_communications_manager:8.0\\(3a\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "56403D34-B803-4DA7-96BC-2E0797D27F69"}, {"criteria": "cpe:2.3:a:cisco:unified_communications_manager:8.0\\(3a\\)su1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "64FDCB2A-AAF7-44EF-B748-6B336B7CD2D5"}, {"criteria": "cpe:2.3:a:cisco:unified_communications_manager:8.0\\(3a\\)su2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "765921EA-40B6-491F-9F05-85E000F12474"}, {"criteria": "cpe:2.3:a:cisco:unified_communications_manager:8.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3E1FA195-A711-4861-9B3D-A36D55C0F49D"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cisco:intercompany_media_engine:8.0\\(2\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5A9DC100-0680-4A7D-A973-3A91A5429918"}, {"criteria": "cpe:2.3:a:cisco:intercompany_media_engine:8.0\\(3\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F16B5E38-666E-4B54-AD32-29B3380F4814"}], "operator": "OR"}]}], "sourceIdentifier": "ykramarz@cisco.com"}