Vulnerabilities > CVE-2011-2577 - Remote Denial of Service vulnerability in Cisco TelePresence Codecs SIP Packet
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
NONE Availability impact
COMPLETE Summary
Unspecified vulnerability in Cisco TelePresence C Series Endpoints, E/EX Personal Video units, and MXP Series Codecs, when using software versions before TC 4.0.0 or F9.1, allows remote attackers to cause a denial of service (crash) via a crafted SIP packet to port 5060 or 5061, aka Bug ID CSCtq46500.
Vulnerable Configurations
Exploit-Db
description | Cisco TelePresence Multiple Vulnerabilities - SOS-11-010. CVE-2011-2543,CVE-2011-2544,CVE-2011-2577. Webapps exploit for hardware platform |
file | exploits/hardware/webapps/17871.txt |
id | EDB-ID:17871 |
last seen | 2016-02-02 |
modified | 2011-09-19 |
platform | hardware |
port | |
published | 2011-09-19 |
reporter | Sense of Security |
source | https://www.exploit-db.com/download/17871/ |
title | Cisco TelePresence Multiple Vulnerabilities - SOS-11-010 |
type | webapps |
Nessus
NASL family | CISCO |
NASL id | CISCO_TELEPRESENCE_MCU_CVE_2011_2577.NASL |
description | According to the self-reported version returned by the SNMP service on the remote device, it is affected by a denial of service vulnerability that can be triggered by sending a specially crafted SIP packet. |
last seen | 2020-06-01 |
modified | 2020-06-02 |
plugin id | 69047 |
published | 2013-07-24 |
reporter | This script is Copyright (C) 2013-2018 Tenable Network Security, Inc. |
source | https://www.tenable.com/plugins/nessus/69047 |
title | Cisco TelePresence Codecs DoS |
code |
|
Packetstorm
data source | https://packetstormsecurity.com/files/download/105229/SOS-11-010.txt |
id | PACKETSTORM:105229 |
last seen | 2016-12-05 |
published | 2011-09-19 |
reporter | Packet Storm |
source | https://packetstormsecurity.com/files/105229/Cisco-TelePresence-Cookie-Theft-Impersonation-Code-Execution.html |
title | Cisco TelePresence Cookie Theft / Impersonation / Code Execution |
Seebug
bulletinFamily | exploit |
description | No description provided by source. |
id | SSV:72141 |
last seen | 2017-11-19 |
modified | 2014-07-01 |
published | 2014-07-01 |
reporter | Root |
source | https://www.seebug.org/vuldb/ssvid-72141 |
title | Cisco TelePresence Multiple Vulnerabilities - SOS-11-010 |
References
- http://securityreason.com/securityalert/8387
- http://securityreason.com/securityalert/8389
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b91395.shtml
- http://www.exploit-db.com/exploits/17871
- http://www.securityfocus.com/archive/1/519698/100/0/threaded
- http://www.securityfocus.com/bid/49392
- http://www.securitytracker.com/id?1025994
- https://exchange.xforce.ibmcloud.com/vulnerabilities/69513