Skip to content
Back to search

CVE-2011-2072

HIGH
7.8NVD

Summary

generated automatically from NVD data

CVE-2011-2072 is a memory leak in the SIP handling of Cisco IOS (12.4, 15.0, 15.1), Cisco IOS XE (2.5.x through 3.2.x) and Cisco Unified Communications Manager (6.x, 7.x, 8.x and 8.6 before certain listed releases). A remote attacker can send a malformed SIP message to trigger memory consumption, causing a device reload or process failure and thus a denial of service. It carries a CVSS v2.0 score of 7.8 (HIGH), with network access, low complexity and no authentication required.

NVD description

Memory leak in Cisco IOS 12.4, 15.0, and 15.1, Cisco IOS XE 2.5.x through 3.2.x, and Cisco Unified Communications Manager (CUCM) 6.x and 7.x before 7.1(5b)su4, 8.x before 8.5(1)su2, and 8.6 before 8.6(1) allows remote attackers to cause a denial of service (memory consumption and device reload or process failure) via a malformed SIP message, aka Bug IDs CSCtl86047 and CSCto88686.

Share:

EPSS · FIRST.org

1.7%probability of exploitation in the next 30 days

Higher than 76% of scored CVEs

EPSS (Exploit Prediction Scoring System) estimates, from observed exploitation activity, how likely a CVE is to be exploited in the next 30 days. It complements CVSS, which measures severity, not likelihood. Score of 2026-10-19, recomputed daily by FIRST.org.

CVSS v2.0 Score

7.8
/ 10.0
HIGH
AV:N/AC:L/Au:N/C:N/I:N/A:C

Information

Published
3 oct. 2011
Updated
16 juin 2026
Status
Modified
Source
psirt@cisco.com

Affected products

cisco ios
Versions : 12.4, 15.0, 15.1
cisco ios xeAll Cisco IOS XE CVEs →
Versions : 2.5.0, 2.5.1, 2.5.2, 2.6.0, 2.6.1
cisco unified communications manager
Versions : 6.0, 6.1\(1\), 6.1\(1a\), 6.1\(1b\), 6.1\(2\)

Weaknesses (CWE)

CWE-399

References (10)

Similar CVEs

Other vulnerabilities of type CWE-399

…

Monitor your products

Get automatic alerts for every new CVE affecting your equipment.

Enable monitoring