CVE-2014-2175
HighSummary
Cisco TelePresence TC Software versions 4.x and 5.x and TE Software versions 4.x and 6.0 are vulnerable to an attack that can lead to denial of service through memory consumption. Attackers can exploit specially crafted H.225 packets, associated with Bug ID CSCtq78849.
Risk Assessment
Attackers can remotely cause system crashes, leading to interruptions in teleconferencing services. This can negatively impact the organization's operations and its communication capabilities.
Recommendation
It is recommended to update Cisco TelePresence software to the latest version to mitigate this vulnerability. Additionally, monitoring network traffic for suspicious H.225 packets can help prevent attacks.
Other vulnerabilities in Cisco TelePresence TC Software 4.x and 5.x, TE Software 4.x and 6.0
See all- CVE-2014-2167High
The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets.
- CVE-2014-2165High
The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to cause a denial of service by sending crafted SIP packets.
Original NVD description (English source)
Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allow remote attackers to cause a denial of service (memory consumption) via crafted H.225 packets, aka Bug ID CSCtq78849.