CVE-2014-3369
HighSummary
The SIP IX implementation in Cisco TelePresence Video Communication Server (VCS) and Expressway Software before X8.1.1 allows remote attackers to cause a denial of service (device reload) via crafted SDP packets.
Risk Assessment
Attackers can exploit this vulnerability to disrupt device operations, potentially leading to communication outages within the organization.
Recommendation
It is recommended to update the software to version X8.1.1 or later to mitigate this vulnerability.
Other vulnerabilities in Cisco TelePresence Video Communication Server (VCS) and Expressway Software
See all- CVE-2014-3370High
Cisco TelePresence Video Communication Server (VCS) and Expressway Software before X8.1.1 are vulnerable to remote attacks that can lead to denial of service by sending crafted SIP packets.
- CVE-2014-3368High
Cisco TelePresence Video Communication Server (VCS) and Expressway Software before X8.2 are vulnerable to an attack that can lead to a denial of service by sending a high rate of crafted packets. Attackers can remotely cause a device reload.
Original NVD description (English source)
The SIP IX implementation in Cisco TelePresence Video Communication Server (VCS) and Expressway Software before X8.1.1 allows remote attackers to cause a denial of service (device reload) via crafted SDP packets, aka Bug ID CSCuo42252.