PT-2011-3935 · Cisco · Cisco Telepresence C Series Endpoints+2

David Klein · Published 2011-08-31 · Updated 2018-10-09 · CVE-2011-2577

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco TelePresence C Series Endpoints, E/EX Personal Video units, and MXP Series Codecs versions prior to TC 4.0.0 or F9.1

Description The issue allows remote attackers to cause a denial of service (crash) via a crafted SIP packet to port 5060 or 5061.

Recommendations For versions prior to TC 4.0.0, update to TC 4.0.0 or later to resolve the issue. For versions prior to F9.1, update to F9.1 or later to resolve the issue. As a temporary workaround, consider restricting access to ports 5060 and 5061 to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2011-2577

Affected Products

Cisco Telepresence C Series Endpoints

E/Ex Personal Video Units

Mxp Series Codecs

References · 10

• 🔥 https://exploit-db.com/exploits/17871 · Exploit
• 🔥 http://exploit-db.com/exploits/17871 · Exploit
• http://cisco.com/en/US/products/products_security_advisory09186a0080b91395.shtml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-2577 · Security Note
• http://securitytracker.com/id?1025994 · Note
• http://securityfocus.com/archive/1/519698/100/0/threaded · Note
• http://securityreason.com/securityalert/8389 · Note
• http://securityfocus.com/bid/49392 · Note
• http://securityreason.com/securityalert/8387 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/69513 · Note