CVE-2011-3318

Published: Oct 27, 2011Modified: Apr 29, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

Cisco Video Surveillance 2421 and 2500 series cameras with software 1.1.x and 2.x before 2.4.0 and Video Surveillance 2600 series cameras with software before 4.2.0-13 allow remote attackers to cause a denial of service (device reload) by sending crafted RTSP packets over TCP, aka Bug IDs CSCtj96312, CSCtj39462, and CSCtl80175.

Affected (16)

Products: Cisco: Video Surveillance 2421, Video Surveillance 2500, Video Surveillance Software, Video Surveillance 2600

Cisco

4 products

Video Surveillance 2421

Video Surveillance 2500

Video Surveillance Software

Video Surveillance 2600

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Cisco Video Surveillance 2421	All versions
Cisco Video Surveillance 2500	All versions
Cisco Video Surveillance Software	Version 1.1.0
Cisco Video Surveillance Software	Version 1.2.1
Cisco Video Surveillance Software	Version 2.0.0
Cisco Video Surveillance Software	Version 2.1.2
Cisco Video Surveillance Software	Version 2.1.3
Cisco Video Surveillance Software	Version 2.1.4
Cisco Video Surveillance Software	Version 2.1.6
Cisco Video Surveillance Software	Version 2.1.7
Cisco Video Surveillance Software	Version 2.1
Cisco Video Surveillance Software	Version 2.3.0
Cisco Video Surveillance Software	Version 2.3.1

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Cisco Video Surveillance 2600	All versions
Cisco Video Surveillance Software	Up to 4.2.0
Cisco Video Surveillance Software	Version 4.0.1

Related CWEs

CWE-399

References (2)

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20111026-camera

Source: psirt@cisco.com

Vendor Advisory

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20111026-camera

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.