CVE-2011-2561 — Cisco Unified Communications Manager vulnerability

CWE-3993 documents3 sources

Severity

7.1HIGHNVD

EPSS

0.4%

top 39.29%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Cisco Unified Communications Manager

Timeline

PublishedAug 29

Latest updateMay 17

Description

The SIP process in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 7.x before 7.1(5b)su4 and 8.x before 8.0(1) does not properly handle SDP data within a SIP call in certain situations related to use of the g729ar8 codec for a Media Termination Point (MTP), which allows remote attackers to cause a denial of service (service outage) via a crafted call, aka Bug ID CSCtc61990.

CVSS vector

AV:N/AC:M/C:N/I:N/A:CExploitability: 8.6 | Impact: 6.9

Affected Packages1 packages

▶NVDcisco/unified_communications_manager27 versions+26

🔴Vulnerability Details

GHSA

GHSA-jxqj-hhh8-m26w: The SIP process in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 7↗2022-05-17

▶

CVEList

CVE-2011-2561: The SIP process in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 7↗2011-08-29

▶