« Volver al listado

CVE-2011-2543

Estado: ModificadaAlta (9)—

Buffer overflow in the cuil component in Cisco Telepresence System Integrator C Series 4.x before TC4.2.0 allows remote authenticated users to cause a denial of service (endpoint reboot or process crash) or possibly execute arbitrary code via a long location parameter to the getxml program, aka Bug ID CSCtq46496.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (4)

Cisco — Telepresence C Series SoftwareCisco — Telepresence Codec C40Cisco — Telepresence Codec C60Cisco — Telepresence Codec C90

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2011-2543",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 9,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C",
          "authentication": "SINGLE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@cisco.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2011-09-23T10:55:02.693",
  "references": [
    {
      "url": "http://secunia.com/advisories/46057",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://secunia.com/advisories/46109",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://securityreason.com/securityalert/8393",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://securitytracker.com/id?1026072",
      "tags": [
        "Exploit"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.exploit-db.com/exploits/17871",
      "tags": [
        "Exploit"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/519698/100/0/threaded",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/49670",
      "source": "psirt@cisco.com"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/69907",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://secunia.com/advisories/46057",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/46109",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securityreason.com/securityalert/8393",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securitytracker.com/id?1026072",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.exploit-db.com/exploits/17871",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/519698/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/49670",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/69907",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Buffer overflow in the cuil component in Cisco Telepresence System Integrator C Series 4.x before TC4.2.0 allows remote authenticated users to cause a denial of service (endpoint reboot or process crash) or possibly execute arbitrary code via a long location parameter to the getxml program, aka Bug ID CSCtq46496."
    },
    {
      "lang": "es",
      "value": "Desbordamiento de búfer en el componente cuil de Cisco TelePresence System Integrator de la Serie C 4.x antes de TC4.2.0, permite a usuarios autenticados remotamente provocar una denegación de servicio (reinicio de punto final o caída del proceso) o posiblemente ejecutar código de su elección a través de un parámetro location largo en el programa GetXml, también conocido como Bug ID CSCtq46496."
    }
  ],
  "lastModified": "2026-06-16T23:31:34.130",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:cisco:telepresence_codec_c40:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3C5E2223-2180-4D0F-9E34-8AF54DC97FE3"
            },
            {
              "criteria": "cpe:2.3:h:cisco:telepresence_codec_c60:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "001596FF-7961-4983-8E1B-E272C94958EB"
            },
            {
              "criteria": "cpe:2.3:h:cisco:telepresence_codec_c90:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CBC21F7C-240C-446E-BDF6-3E1AB9B05B4F"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:telepresence_c_series_software:tc4.0.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "33B45531-86E4-462A-ADCD-AB519E3A7CBA"
            },
            {
              "criteria": "cpe:2.3:a:cisco:telepresence_c_series_software:tc4.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "180F6879-05EC-4BEC-92E8-DD55BCB93D2C"
            },
            {
              "criteria": "cpe:2.3:a:cisco:telepresence_c_series_software:tc4.0.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "556BF725-71CD-40B8-BECD-557DC8922E87"
            },
            {
              "criteria": "cpe:2.3:a:cisco:telepresence_c_series_software:tc4.1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E2B10E3F-CE68-4D2E-BC59-C4FAA6675280"
            },
            {
              "criteria": "cpe:2.3:a:cisco:telepresence_c_series_software:tc4.1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "71A51261-B1D7-4ACA-8399-6BBBB17CDB93"
            },
            {
              "criteria": "cpe:2.3:a:cisco:telepresence_c_series_software:tc4.1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "321FC6B1-D14C-490C-A1EB-E61F63DFB4F2"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "psirt@cisco.com"
}