CVE-2011-2564

Unspecified vulnerability in the Service Advertisement Framework (SAF) in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 8.x before 8.5(1) and Cisco Intercompany Media Engine 8.x before 8.5(1) allows remote attackers to cause a denial of service (device reload) via crafted SAF packets, aka Bug ID CSCth19417.

CVSS v2.0 7.8 HIGH

7.8^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability : 10.0 / Impact : 6.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

References

Link	Resource
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b8f531.shtml	Vendor Advisory
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b8f533.shtml	Vendor Advisory
http://www.securitytracker.com/id?1025969

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:cisco:unified_communications_manager:8.0:::::::*
	cpe:2.3:a:cisco:unified_communications_manager:8.0\(1\):::::::*
	cpe:2.3:a:cisco:unified_communications_manager:8.0\(2c\):::::::*
	cpe:2.3:a:cisco:unified_communications_manager:8.0\(2c\)su1:::::::*
	cpe:2.3:a:cisco:unified_communications_manager:8.0\(3\):::::::*
	cpe:2.3:a:cisco:unified_communications_manager:8.0\(3a\):::::::*
	cpe:2.3:a:cisco:unified_communications_manager:8.0\(3a\)su1:::::::*
	cpe:2.3:a:cisco:unified_communications_manager:8.0\(3a\)su2:::::::*
	cpe:2.3:a:cisco:unified_communications_manager:8.5:::::::*

Configuration 2 (hide)

OR	cpe:2.3:a:cisco:intercompany_media_engine:8.0\(2\):::::::*
	cpe:2.3:a:cisco:intercompany_media_engine:8.0\(3\):::::::*

History

No history.

Information

Published : 2011-08-29 15:55

Updated : 2023-12-10 11:03

NVD link : CVE-2011-2564

Mitre link : CVE-2011-2564

CVE.ORG link : CVE-2011-2564

JSON object : View

Products Affected

cisco

intercompany_media_engine
unified_communications_manager

CWE

NVD-CWE-noinfo

{"id": "CVE-2011-2564", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 6.9, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2011-08-29T15:55:01.347", "references": [{"url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b8f531.shtml", "tags": ["Vendor Advisory"], "source": "ykramarz@cisco.com"}, {"url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b8f533.shtml", "tags": ["Vendor Advisory"], "source": "ykramarz@cisco.com"}, {"url": "http://www.securitytracker.com/id?1025969", "source": "ykramarz@cisco.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in the Service Advertisement Framework (SAF) in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 8.x before 8.5(1) and Cisco Intercompany Media Engine 8.x before 8.5(1) allows remote attackers to cause a denial of service (device reload) via crafted SAF packets, aka Bug ID CSCth19417."}, {"lang": "es", "value": "Vulnerabilidad no especificada en el Service Advertisement Framework (SAF) en Cisco Unified Communications Manager (tambi\u00e9n conocido c\u00f3mo CUCM, formalmente CallManager) v8.x antes de v8.5(1) y Cisco Intercompany Media Engine v8.x antes de v8.5(1) permite a atacantes remotos provocar una denegaci\u00f3n de servicio (reinicio del dispositivo) a trav\u00e9s de paquetes SAF modificados, tambi\u00e9n conocido como Bug ID CSCth19417"}], "lastModified": "2011-10-06T02:50:14.770", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cisco:unified_communications_manager:8.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "248E4608-B870-4913-8048-3771685CBD77"}, {"criteria": "cpe:2.3:a:cisco:unified_communications_manager:8.0\\(1\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "52D7EECA-322E-48E4-9682-6C3C39B64B9A"}, {"criteria": "cpe:2.3:a:cisco:unified_communications_manager:8.0\\(2c\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C09FE52A-E0AF-4B0F-A44E-4362E26A88D9"}, {"criteria": "cpe:2.3:a:cisco:unified_communications_manager:8.0\\(2c\\)su1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A9AD0704-6F85-4E64-88D4-73E8BB2BEF4E"}, {"criteria": "cpe:2.3:a:cisco:unified_communications_manager:8.0\\(3\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "07EF7BE6-2702-4174-A8AA-AFD44014F8A7"}, {"criteria": "cpe:2.3:a:cisco:unified_communications_manager:8.0\\(3a\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "56403D34-B803-4DA7-96BC-2E0797D27F69"}, {"criteria": "cpe:2.3:a:cisco:unified_communications_manager:8.0\\(3a\\)su1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "64FDCB2A-AAF7-44EF-B748-6B336B7CD2D5"}, {"criteria": "cpe:2.3:a:cisco:unified_communications_manager:8.0\\(3a\\)su2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "765921EA-40B6-491F-9F05-85E000F12474"}, {"criteria": "cpe:2.3:a:cisco:unified_communications_manager:8.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3E1FA195-A711-4861-9B3D-A36D55C0F49D"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cisco:intercompany_media_engine:8.0\\(2\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5A9DC100-0680-4A7D-A973-3A91A5429918"}, {"criteria": "cpe:2.3:a:cisco:intercompany_media_engine:8.0\\(3\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F16B5E38-666E-4B54-AD32-29B3380F4814"}], "operator": "OR"}]}], "sourceIdentifier": "ykramarz@cisco.com"}