PT-2014-4516 · Cisco · Cisco Telepresence System Mxp Series

Published 2014-05-02 · Updated 2014-05-02 · CVE-2014-2158

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco TelePresence System MXP Series Software versions prior to F9.3.1

Description The issue allows remote attackers to cause a denial of service, resulting in a device reload, by sending crafted SIP packets.

Recommendations For versions prior to F9.3.1, update to version F9.3.1 or later to resolve the issue.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2014-2158

Affected Products

Cisco Telepresence System Mxp Series

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2014-2158 · Security Note
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140430-mxp · Vendor Advisory