CVE-2011-2560: The Packet Capture Service in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x doe...

Security readout for executives and security teams

CVE-2011-2560 is a denial-of-service issue in Cisco Unified Communications Manager 4.x. A remote attacker could consume memory and force a restart by opening many idle TCP connections to the Packet Capture Service. The sources do not provide CVSS scoring or confirmed active exploitation. Exposure is most likely limited to organizations still running legacy Cisco Unified Communications Manager 4.x with reachable Packet Capture Service interfaces. Internet exposure would increase urgency, but the provided sources do not state typical deployment exposure or default reachability. Treat as a legacy-platform availability risk. It is not presented as data theft or remote code execution, but voice infrastructure outages can disrupt business operations. Prioritize if CUCM 4.x is still used or reachable by untrusted networks. Mitigation focus: Identify whether any Cisco Unified Communications Manager 4.x systems remain in service.; Review Cisco's 2011 advisory for vendor-supported remediation or upgrade guidance.; Reduce network reachability to CUCM services while remediation is evaluated..

Prepared

Jun 27, 2026, 18:09 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.