Summary
generated automatically from NVD dataCVE-2011-0939 is an unspecified vulnerability in Cisco IOS (versions 12.4, 15.0 and 15.1) and Cisco IOS XE (2.5.x through 3.2.x per the description). A remote attacker can send a specially crafted SIP message to make the device reload, causing a denial of service. The flaw is tracked as Cisco Bug ID CSCth03022 and has a CVSS v2.0 score of 7.8 (HIGH), with network attack vector, low complexity, no authentication and a complete availability impact.
NVD description
Unspecified vulnerability in Cisco IOS 12.4, 15.0, and 15.1, and IOS XE 2.5.x through 3.2.x, allows remote attackers to cause a denial of service (device reload) via a crafted SIP message, aka Bug ID CSCth03022.
EPSS · FIRST.org
1.8%probability of exploitation in the next 30 days
Higher than 77% of scored CVEs
EPSS (Exploit Prediction Scoring System) estimates, from observed exploitation activity, how likely a CVE is to be exploited in the next 30 days. It complements CVSS, which measures severity, not likelihood. Score of 2026-10-19, recomputed daily by FIRST.org.
CVSS v2.0 Score
Information
- Published
- 3 oct. 2011
- Updated
- 16 juin 2026
- Status
- Modified
- Source
- psirt@cisco.com
Affected products
Weaknesses (CWE)
References (4)
Similar CVEs
Other vulnerabilities of type
Monitor your products
Get automatic alerts for every new CVE affecting your equipment.