$ cve CVE-2011-2577 JSON

CVE-2011-2577 EXPLOIT

7.8

HIGH · CVSS 2.0 · EPSS 12.7% (pctl 96)

Patch early

A public exploit exists.

Description

Unspecified vulnerability in Cisco TelePresence C Series Endpoints, E/EX Personal Video units, and MXP Series Codecs, when using software versions before TC 4.0.0 or F9.1, allows remote attackers to cause a denial of service (crash) via a crafted SIP packet to port 5060 or 5061, aka Bug ID CSCtq46500.

Scoring

CVSS	7.8 (HIGH, v2.0)
Vector	AV:N/AC:L/Au:N/C:N/I:N/A:C
EPSS	12.72% — more likely to be exploited than 96% of all CVEs
On CISA KEV	no
Public exploit	yes
Published	2011-08-31
Last modified	2026-06-16

Affected (11)

Vendor	Product
cisco	telepresence 6000 mxp
cisco	telepresence 9000 mxp
cisco	telepresence c series software
cisco	telepresence codec c40
cisco	telepresence codec c60
cisco	telepresence codec c90
cisco	telepresence e20
cisco	telepresence e20 software
cisco	telepresence ex60
cisco	telepresence ex90
cisco	telepresence mxp software

Public exploits

Source	Title	Date
exploit-db	Cisco TelePresence SOS-11-010 - Multiple Vulnerabilities	2011-09-19

References

→ the Explorer · watch your stack · NVD