CVE-2014-3370
HighSummary
Cisco TelePresence Video Communication Server (VCS) and Expressway Software before X8.1.1 are vulnerable to remote attacks that can lead to denial of service by sending crafted SIP packets.
Risk Assessment
Attackers can remotely reload the device, resulting in a disruption of telecommunication services.
Recommendation
It is recommended to update the software to version X8.1.1 or later to mitigate this vulnerability.
Other vulnerabilities in Cisco TelePresence Video Communication Server (VCS) and Expressway Software
See all- CVE-2014-3369High
The SIP IX implementation in Cisco TelePresence Video Communication Server (VCS) and Expressway Software before X8.1.1 allows remote attackers to cause a denial of service (device reload) via crafted SDP packets.
- CVE-2014-3368High
Cisco TelePresence Video Communication Server (VCS) and Expressway Software before X8.2 are vulnerable to an attack that can lead to a denial of service by sending a high rate of crafted packets. Attackers can remotely cause a device reload.
Original NVD description (English source)
Cisco TelePresence Video Communication Server (VCS) and Expressway Software before X8.1.1 allow remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug IDs CSCum60442 and CSCum60447.