PT-2011-3935 · Cisco · Cisco Telepresence C Series Endpoints+2

David Klein · Publicado 2011-08-31 · Atualizado 2018-10-09 · CVE-2011-2577

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco TelePresence C Series Endpoints, E/EX Personal Video units, and MXP Series Codecs versions prior to TC 4.0.0 or F9.1

Description The issue allows remote attackers to cause a denial of service (crash) via a crafted SIP packet to port 5060 or 5061.

Recommendations For versions prior to TC 4.0.0, update to TC 4.0.0 or later to resolve the issue. For versions prior to F9.1, update to F9.1 or later to resolve the issue. As a temporary workaround, consider restricting access to ports 5060 and 5061 to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2011-2577

Produtos afetados

Cisco Telepresence C Series Endpoints

E/Ex Personal Video Units

Mxp Series Codecs

Referências · 10

• 🔥 https://exploit-db.com/exploits/17871 · Exploit
• 🔥 http://exploit-db.com/exploits/17871 · Exploit
• http://cisco.com/en/US/products/products_security_advisory09186a0080b91395.shtml · Aviso do Fabricante
• http://securitytracker.com/id?1025994 · Nota
• http://securityfocus.com/archive/1/519698/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-2577 · Nota de Segurança
• http://securityreason.com/securityalert/8389 · Nota
• http://securityfocus.com/bid/49392 · Nota
• http://securityreason.com/securityalert/8387 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/69513 · Nota