CVE-2011-3318

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2011-10-27 · updated 2026-06-16
Weakness: CWE-399

Description

Cisco Video Surveillance 2421 and 2500 series cameras with software 1.1.x and 2.x before 2.4.0 and Video Surveillance 2600 series cameras with software before 4.2.0-13 allow remote attackers to cause a denial of service (device reload) by sending crafted RTSP packets over TCP, aka Bug IDs CSCtj96312, CSCtj39462, and CSCtl80175.

Affected products

Cisco Video Surveillance 2421: all versions
Cisco Video Surveillance 2500: all versions
Cisco Video Surveillance 2600: all versions
Cisco Video Surveillance Software: through 4.2.0; 1.1.0, 1.2.1, 2.0.0, 2.1, 2.1.2, 2.1.3 (+6)

References

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20111026-camera
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20111026-camera

Get alerted when CVE-2011-3318 or the next vulnerability affects your stack