CVE-2011-4486 — HIGH (7.8) — White Hats Nepal

Vulnerability Description

Cisco Unified Communications Manager (CUCM) with software 6.x and 7.x before 7.1(5b)su5, 8.0 before 8.0(3a)su3, and 8.5 and 8.6 before 8.6(2a)su1 and Cisco Business Edition 3000 with software before 8.6.3 and 5000 and 6000 with software before 8.6(2a)su1 allow remote attackers to cause a denial of service (device reload) via a crafted SCCP registration, aka Bug ID CSCtu73538.

CVSS Score

7.8

HIGH

AV:N/AC:L/Au:N/C:N/I:N/A:C

Confidentiality

NONE

Integrity

NONE

Availability

COMPLETE

Affected Products

Vendor	Product	Versions
Cisco	Unified Communications Manager	6.0
Cisco	Business Edition 3000 Software	8.6\(1\)
Cisco	Business Edition 3000	-
Cisco	Business Edition 5000 Software	8.5
Cisco	Business Edition 5000	-
Cisco	Business Edition 6000 Software	8.5\(1\)
Cisco	Business Edition 6000	-

Related Weaknesses (CWE)

CWE-399

References

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20Vendor Advisory

FAQ

What is CVE-2011-4486?

CVE-2011-4486 is a vulnerability with a CVSS score of 7.8 (HIGH). Cisco Unified Communications Manager (CUCM) with software 6.x and 7.x before 7.1(5b)su5, 8.0 before 8.0(3a)su3, and 8.5 and 8.6 before 8.6(2a)su1 and Cisco Business Edition 3000 with software before 8...

How severe is CVE-2011-4486?

CVE-2011-4486 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2011-4486?

Check the references section above for vendor advisories and patch information. Affected products include: Cisco Unified Communications Manager, Cisco Business Edition 3000 Software, Cisco Business Edition 3000, Cisco Business Edition 5000 Software, Cisco Business Edition 5000.