CVE-2011-2563: Cisco Intercompany Media Engine

High severity, CVSS 7.8. EPSS: 1.6% chance of exploitation in the next 30 days.

Unspecified vulnerability in the Service Advertisement Framework (SAF) in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 8.x before 8.5(1) and Cisco Intercompany Media Engine 8.x before 8.5(1) allows remote attackers to cause a denial of service (device reload) via crafted SAF packets, aka Bug ID CSCth26669.

Affected products

• Cisco Intercompany Media Engine: version 8.0(2) only; version 8.0(3) only
• Cisco Unified Communications Manager: version 8.0 only; version 8.0(1) only; version 8.0(2c) only; version 8.0(2c)su1 only; version 8.0(3) only; version 8.0(3a) only; …

Published 2011-08-29. Last modified 2026-06-16.