CVE-2011-3318: Cisco Video Surveillance 2421

High severity, CVSS 7.8. EPSS: 1.2% chance of exploitation in the next 30 days.

Cisco Video Surveillance 2421 and 2500 series cameras with software 1.1.x and 2.x before 2.4.0 and Video Surveillance 2600 series cameras with software before 4.2.0-13 allow remote attackers to cause a denial of service (device reload) by sending crafted RTSP packets over TCP, aka Bug IDs CSCtj96312, CSCtj39462, and CSCtl80175.

Affected products

• Cisco Video Surveillance 2421
• Cisco Video Surveillance 2500
• Cisco Video Surveillance 2600
• Cisco Video Surveillance Software: version 1.1.0 only; version 1.2.1 only; version 2.0.0 only; version 2.1 only; version 2.1.2 only; version 2.1.3 only; …

Published 2011-10-27. Last modified 2026-06-16.