CVE-2014-2167
HighSummary
The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets.
Risk Assessment
Attackers can remotely restart devices, leading to service availability interruptions.
Recommendation
It is recommended to update the software to the latest version to mitigate this vulnerability.
Other vulnerabilities in Cisco TelePresence TC Software 4.x and 5.x, TE Software 4.x and 6.0
See all- CVE-2014-2175High
Cisco TelePresence TC Software versions 4.x and 5.x and TE Software versions 4.x and 6.0 are vulnerable to an attack that can lead to denial of service through memory consumption. Attackers can exploit specially crafted H.225 packets, associated with Bug ID CSCtq78849.
- CVE-2014-2165High
The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to cause a denial of service by sending crafted SIP packets.
Original NVD description (English source)
The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCua86589.