CVE-2011-2543

Cisco Telepresence C Series < TC4.2.0 - Authenticated Buffer Overflow via cuil getxml Location Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2011-2543. PoCs published by Sense of Security.

AI-analyzed exploit summary This advisory details multiple vulnerabilities in Cisco TelePresence Series, including HTML injection (CVE-2011-2544), memory corruption (CVE-2011-2543), and SIP DoS (CVE-2011-2577). It provides technical analysis, proof-of-concept examples, and crash logs.

Description

Buffer overflow in the cuil component in Cisco Telepresence System Integrator C Series 4.x before TC4.2.0 allows remote authenticated users to cause a denial of service (endpoint reboot or process crash) or possibly execute arbitrary code via a long location parameter to the getxml program, aka Bug ID CSCtq46496.

Exploits (1)

exploitdb WRITEUP

by Sense of Security · textwebappshardware

https://www.exploit-db.com/exploits/17871

View Code ZIP pw:eip

This advisory details multiple vulnerabilities in Cisco TelePresence Series, including HTML injection (CVE-2011-2544), memory corruption (CVE-2011-2543), and SIP DoS (CVE-2011-2577). It provides technical analysis, proof-of-concept examples, and crash logs.

Classification

Writeup 100%

Attack Type

Other

Complexity

Moderate

Reliability

Reliable

Target: Cisco TelePresence Series (C <= TC4.1.2, MXP <= F9.1)

Auth required

Prerequisites: Network access to the target device · Authenticated session for HTML injection

MITRE ATT&CK