CVE-2014-3368
HighSummary
Cisco TelePresence Video Communication Server (VCS) and Expressway Software before X8.2 are vulnerable to an attack that can lead to a denial of service by sending a high rate of crafted packets. Attackers can remotely cause a device reload.
Risk Assessment
This vulnerability may lead to service outages, negatively impacting organizational operations and user trust.
Recommendation
It is recommended to update the software to version X8.2 or later to mitigate the risk associated with this vulnerability.
Other vulnerabilities in Cisco TelePresence Video Communication Server (VCS) and Expressway Software
See all- CVE-2014-3370High
Cisco TelePresence Video Communication Server (VCS) and Expressway Software before X8.1.1 are vulnerable to remote attacks that can lead to denial of service by sending crafted SIP packets.
- CVE-2014-3369High
The SIP IX implementation in Cisco TelePresence Video Communication Server (VCS) and Expressway Software before X8.1.1 allows remote attackers to cause a denial of service (device reload) via crafted SDP packets.
Original NVD description (English source)
Cisco TelePresence Video Communication Server (VCS) and Expressway Software before X8.2 allow remote attackers to cause a denial of service (device reload) via a high rate of crafted packets, aka Bug ID CSCui06507.