NetSight
IP …
high7.8Public exploit code

CVE-2011-2577

Unspecified vulnerability in Cisco TelePresence C Series Endpoints, E/EX Personal Video units, and MXP Series Codecs, when using software versions before TC 4.…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Unspecified vulnerability in Cisco TelePresence C Series Endpoints, E/EX Personal Video units, and MXP Series Codecs, when using software versions before TC 4.0.0 or F9.1, allows remote attackers to cause a denial of service (crash) via a crafted SIP packet to port 5060 or 5061, aka Bug ID CSCtq46500.

Affected products

VendorProductAffected versions
CiscoTelepresence Codec C40
All versions
CiscoTelepresence Codec C60
All versions
CiscoTelepresence Codec C90
All versions
CiscoTelepresence Ex60
All versions
CiscoTelepresence Ex90
All versions
CiscoTelepresence C Series Software
through tc3.1.4
Versions tc3.0.0, tc3.1.0, tc3.1.1, tc3.1.2, tc3.1.3
CiscoTelepresence 6000 Mxp
All versions
CiscoTelepresence 9000 Mxp
All versions
CiscoTelepresence Mxp Software
Versions f8.2, f9.0, f9.0.1, f9.0.2
CiscoTelepresence E20
All versions
CiscoTelepresence E20 Software
Version te2.2.1

References