CVE-2011-2563

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2011-08-29 · updated 2026-06-16

Description

Unspecified vulnerability in the Service Advertisement Framework (SAF) in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 8.x before 8.5(1) and Cisco Intercompany Media Engine 8.x before 8.5(1) allows remote attackers to cause a denial of service (device reload) via crafted SAF packets, aka Bug ID CSCth26669.

Affected products

Cisco Intercompany Media Engine: 8.0(2), 8.0(3)
Cisco Unified Communications Manager: 8.0, 8.0(1), 8.0(2c), 8.0(2c)su1, 8.0(3), 8.0(3a) (+3)

References

http://www.cisco.com/en/US/products/products_security_advisory09186a0080b8f531.shtml
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b8f533.shtml
http://www.securitytracker.com/id?1025969
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b8f531.shtml
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b8f533.shtml
http://www.securitytracker.com/id?1025969

Get alerted when CVE-2011-2563 or the next vulnerability affects your stack