Cisco Video Surveillance 2421, 2500, and 2600 Series IP Cameras Denial of Service Vulnerability

Bugtraq ID:	50371
Class:	Design Error
CVE:	CVE-2011-3318
Remote:	Yes
Local:	No
Published:	Oct 26 2011 12:00AM
Updated:	Oct 26 2011 12:00AM
Credit:	Cisco
Vulnerable:	Cisco Video Surveillance 2600 Series IP Camera 0 Cisco Video Surveillance 2500 Series IP Camera 2.1 Cisco Video Surveillance 2500 Series IP Camera 2.0 Cisco Video Surveillance 2500 Series IP Camera 0 Cisco Video Surveillance 2421 Series IP Camera 0
Not Vulnerable:	Cisco Video Surveillance 5000 Series HD IP Dome Camera 0 Cisco Video Surveillance 4000 Series IP Camera 0 Cisco Video Surveillance 2900 Series IP Camera 0

Cisco Video Surveillance 2421, 2500, and 2600 Series IP Cameras Denial of Service Vulnerability

Cisco Video Surveillance 2421, 2500, and 2600 series IP Cameras are prone to a denial-of-service vulnerability.

An attacker can exploit this issue to prevent a vulnerable device from sending video streams, and cause it to reload, triggering a denial-of-service condition.

This issue is tracked by Cisco Bug IDs CSCtj96312, CSCtj39462, and CSCtl80175.

Cisco Video Surveillance 2421, 2500, and 2600 Series IP Cameras Denial of Service Vulnerability

Attackers can use readily available networking tools to exploit this issue.

Cisco Video Surveillance 2421, 2500, and 2600 Series IP Cameras Denial of Service Vulnerability

Solution:
Updates are available. Please see the references for details.

Cisco Video Surveillance 2421, 2500, and 2600 Series IP Cameras Denial of Service Vulnerability

References:

• Cisco Homepage (Cisco )
  
• Denial of Service Vulnerability in Cisco Video Surveillance IP Cameras (Cisco)