What’s Vulnerable › Vulnerabilities

CVE-2011-2577

• Severity: high (CVSS 7.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 12.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2011-08-31 · updated 2026-06-16

Description

Unspecified vulnerability in Cisco TelePresence C Series Endpoints, E/EX Personal Video units, and MXP Series Codecs, when using software versions before TC 4.0.0 or F9.1, allows remote attackers to cause a denial of service (crash) via a crafted SIP packet to port 5060 or 5061, aka Bug ID CSCtq46500.

Affected products

• Cisco Telepresence 6000 Mxp: all versions
• Cisco Telepresence 9000 Mxp: all versions
• Cisco Telepresence C Series Software: through tc3.1.4; tc3.0.0, tc3.1.0, tc3.1.1, tc3.1.2, tc3.1.3
• Cisco Telepresence Codec C40: all versions
• Cisco Telepresence Codec C60: all versions
• Cisco Telepresence Codec C90: all versions
• Cisco Telepresence E20: all versions
• Cisco Telepresence E20 Software: te2.2.1
• Cisco Telepresence Ex60: all versions
• Cisco Telepresence Ex90: all versions
• Cisco Telepresence Mxp Software: f8.2, f9.0, f9.0.1, f9.0.2

References

• http://securityreason.com/securityalert/8387
• http://securityreason.com/securityalert/8389
• http://www.cisco.com/en/US/products/products_security_advisory09186a0080b91395.shtml
• http://www.exploit-db.com/exploits/17871
• http://www.securityfocus.com/archive/1/519698/100/0/threaded
• http://www.securityfocus.com/bid/49392
• http://www.securitytracker.com/id?1025994
• https://exchange.xforce.ibmcloud.com/vulnerabilities/69513
• http://securityreason.com/securityalert/8387
• http://securityreason.com/securityalert/8389
• http://www.cisco.com/en/US/products/products_security_advisory09186a0080b91395.shtml
• http://www.exploit-db.com/exploits/17871

Get alerted when CVE-2011-2577 or the next vulnerability affects your stack