PT-2015-4781 · Cisco · Cisco Telepresence Video Communication Server+2

Publicado 2015-03-13 · Atualizado 2015-09-11 · CVE-2015-0652

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Video Communication Server (VCS) versions prior to X8.2 Cisco Expressway versions prior to X8.2 Cisco TelePresence Conductor versions prior to XC2.4

Description The issue is related to the Session Description Protocol (SDP) implementation, which allows remote attackers to cause a denial of service. This can be achieved by sending a crafted media description, resulting in a mishandled exception and device reload.

Recommendations For Cisco TelePresence Video Communication Server (VCS) versions prior to X8.2, update to version X8.2 or later. For Cisco Expressway versions prior to X8.2, update to version X8.2 or later. For Cisco TelePresence Conductor versions prior to XC2.4, update to version XC2.4 or later.

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2015-0652

Produtos afetados

Cisco Expressway

Cisco Telepresence Conductor

Cisco Telepresence Video Communication Server

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2015-0652 · Nota de Segurança
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150311-vcs · Aviso do Fabricante
• http://securitytracker.com/id/1031910 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0652 · Nota