CVE-2011-2543

Severity: critical (CVSS 9.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 11.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2011-09-23 · updated 2026-06-16
Weakness: CWE-119

Description

Buffer overflow in the cuil component in Cisco Telepresence System Integrator C Series 4.x before TC4.2.0 allows remote authenticated users to cause a denial of service (endpoint reboot or process crash) or possibly execute arbitrary code via a long location parameter to the getxml program, aka Bug ID CSCtq46496.

Affected products

Cisco Telepresence C Series Software: tc4.0.0, tc4.0.1, tc4.0.4, tc4.1.0, tc4.1.1, tc4.1.2
Cisco Telepresence Codec C40: all versions
Cisco Telepresence Codec C60: all versions
Cisco Telepresence Codec C90: all versions

References

http://secunia.com/advisories/46057
http://secunia.com/advisories/46109
http://securityreason.com/securityalert/8393
http://securitytracker.com/id?1026072
http://www.exploit-db.com/exploits/17871
http://www.securityfocus.com/archive/1/519698/100/0/threaded
http://www.securityfocus.com/bid/49670
https://exchange.xforce.ibmcloud.com/vulnerabilities/69907
http://secunia.com/advisories/46057
http://secunia.com/advisories/46109
http://securityreason.com/securityalert/8393
http://securitytracker.com/id?1026072

Get alerted when CVE-2011-2543 or the next vulnerability affects your stack