Vulnerability Description
Unspecified vulnerability in the Service Advertisement Framework (SAF) in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 8.x before 8.5(1) and Cisco Intercompany Media Engine 8.x before 8.5(1) allows remote attackers to cause a denial of service (device reload) via crafted SAF packets, aka Bug ID CSCth19417.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Unified Communications Manager | 8.0 |
| Cisco | Intercompany Media Engine | 8.0\(2\) |
References
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b8f531.sVendor Advisory
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b8f533.sVendor Advisory
- http://www.securitytracker.com/id?1025969
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b8f531.sVendor Advisory
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b8f533.sVendor Advisory
- http://www.securitytracker.com/id?1025969
FAQ
What is CVE-2011-2564?
CVE-2011-2564 is a vulnerability with a CVSS score of 7.8 (HIGH). Unspecified vulnerability in the Service Advertisement Framework (SAF) in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 8.x before 8.5(1) and Cisco Intercompany Media Engine 8....
How severe is CVE-2011-2564?
CVE-2011-2564 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2011-2564?
Check the references section above for vendor advisories and patch information. Affected products include: Cisco Unified Communications Manager, Cisco Intercompany Media Engine.