CVE-2011-2561

Severity: high (CVSS 7.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2011-08-29 · updated 2026-06-16
Weakness: CWE-399

Description

The SIP process in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 7.x before 7.1(5b)su4 and 8.x before 8.0(1) does not properly handle SDP data within a SIP call in certain situations related to use of the g729ar8 codec for a Media Termination Point (MTP), which allows remote attackers to cause a denial of service (service outage) via a crafted call, aka Bug ID CSCtc61990.

Affected products

Cisco Unified Communications Manager: 7.0(1)su1, 7.0(1)su1a, 7.0(2), 7.0(2a), 7.0(2a)su1, 7.0(2a)su2 (+21)

References

http://www.cisco.com/en/US/products/products_security_advisory09186a0080b8f531.shtml
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b8f531.shtml

Get alerted when CVE-2011-2561 or the next vulnerability affects your stack