Vulnerability Details CVE-2011-2564
Unspecified vulnerability in the Service Advertisement Framework (SAF) in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 8.x before 8.5(1) and Cisco Intercompany Media Engine 8.x before 8.5(1) allows remote attackers to cause a denial of service (device reload) via crafted SAF packets, aka Bug ID CSCth19417.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 68.5%
CVSS Severity
CVSS v2 Score 7.8
References
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b8f531.shtml
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b8f533.shtml
- http://www.securitytracker.com/id?1025969
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b8f531.shtml
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b8f533.shtml
- http://www.securitytracker.com/id?1025969
Products affected by CVE-2011-2564
-
cpe:2.3:a:cisco:intercompany_media_engine:8.0(2)
-
cpe:2.3:a:cisco:intercompany_media_engine:8.0(3)
-
cpe:2.3:a:cisco:unified_communications_manager:8.0
-
cpe:2.3:a:cisco:unified_communications_manager:8.0(1)
-
cpe:2.3:a:cisco:unified_communications_manager:8.0(2c)
-
cpe:2.3:a:cisco:unified_communications_manager:8.0(2c)su1
-
cpe:2.3:a:cisco:unified_communications_manager:8.0(3)
-
cpe:2.3:a:cisco:unified_communications_manager:8.0(3a)
-
cpe:2.3:a:cisco:unified_communications_manager:8.0(3a)su1
-
cpe:2.3:a:cisco:unified_communications_manager:8.0(3a)su2
-
cpe:2.3:a:cisco:unified_communications_manager:8.5