CVE-2011-0939: Cisco IOS

High severity, CVSS 7.8. EPSS: 1.8% chance of exploitation in the next 30 days.

Unspecified vulnerability in Cisco IOS 12.4, 15.0, and 15.1, and IOS XE 2.5.x through 3.2.x, allows remote attackers to cause a denial of service (device reload) via a crafted SIP message, aka Bug ID CSCth03022.

Affected products

• Cisco IOS: version 12.4 only; version 15.0 only; version 15.1 only
• Cisco IOS XE: version 2.5.0 only; version 2.5.1 only; version 2.5.2 only; version 2.6.0 only; version 2.6.1 only; version 2.6.2 only; …

Published 2011-10-03. Last modified 2026-06-16.