7.8

CVE-2011-2560

EPSS 0.43%
Veröffentlicht 29.08.2011 15:55:01
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle psirt@cisco.com
CVE-Watchlists
Login
Unerledigt
Login

The Packet Capture Service in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x does not properly handle idle TCP connections, which allows remote attackers to cause a denial of service (memory consumption and restart) by making many connections, aka Bug ID CSCtf97162.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Cisco ≫ Unified Communications Manager Version4.2

Cisco ≫ Unified Communications Manager Version4.2.1

Cisco ≫ Unified Communications Manager Version4.2.2

Cisco ≫ Unified Communications Manager Version4.2.3

Cisco ≫ Unified Communications Manager Version4.2.3sr1

Cisco ≫ Unified Communications Manager Version4.2.3sr2

Cisco ≫ Unified Communications Manager Version4.2.3sr2b

Cisco ≫ Unified Communications Manager Version4.3

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.43%	0.615

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.8	10	6.9	AV:N/AC:L/Au:N/C:N/I:N/A:C

http://www.cisco.com/en/US/products/products_security_advisory09186a0080b8f531.shtml

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2011-2560

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2011-2560

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2011-2560

EUVD