CVE-2011-2577

Cisco TelePresence C Series, E/EX, MXP < TC 4.0.0/F9.1 - DoS via SIP Packet

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2011-2577. PoCs published by Sense of Security.

AI-analyzed exploit summary This advisory details multiple vulnerabilities in Cisco TelePresence Series, including HTML injection (CVE-2011-2544), memory corruption (CVE-2011-2543), and SIP DoS (CVE-2011-2577). It provides technical analysis, proof-of-concept examples, and crash logs.

Description

Unspecified vulnerability in Cisco TelePresence C Series Endpoints, E/EX Personal Video units, and MXP Series Codecs, when using software versions before TC 4.0.0 or F9.1, allows remote attackers to cause a denial of service (crash) via a crafted SIP packet to port 5060 or 5061, aka Bug ID CSCtq46500.

Exploits (1)

exploitdb WRITEUP

by Sense of Security · textwebappshardware

https://www.exploit-db.com/exploits/17871

View Code ZIP pw:eip

This advisory details multiple vulnerabilities in Cisco TelePresence Series, including HTML injection (CVE-2011-2544), memory corruption (CVE-2011-2543), and SIP DoS (CVE-2011-2577). It provides technical analysis, proof-of-concept examples, and crash logs.

Classification

Writeup 100%

Attack Type

Other

Complexity

Moderate

Reliability

Reliable

Target: Cisco TelePresence Series (C <= TC4.1.2, MXP <= F9.1)

Auth required

Prerequisites: Network access to the target device · Authenticated session for HTML injection

MITRE ATT&CK