CVE-2014-0662

Published: Jan 22, 2014Modified: Apr 29, 2026

7.1

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Exploitability: 8.6 / Impact: 6.9

Source: NVD

Description

The SIP module in Cisco TelePresence Video Communication Server (VCS) before 8.1 allows remote attackers to cause a denial of service (process failure) via a crafted SDP message, aka Bug ID CSCue97632.

Affected (10)

Products: Cisco: Telepresence Video Communication Server Software, Telepresence Video Communication Servers Software

2 products

Telepresence Video Communication Server Software

Telepresence Video Communication Servers Software

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Cisco Telepresence Video Communication Server Software	Up to x7.2.2
Cisco Telepresence Video Communication Server Software	Version x6.0
Cisco Telepresence Video Communication Server Software	Version x6.1
Cisco Telepresence Video Communication Server Software	Version x7.1
Cisco Telepresence Video Communication Server Software	Version x7.2.1
Cisco Telepresence Video Communication Server Software	Version x7.2
Cisco Telepresence Video Communication Servers Software	Version x7.0.1
Cisco Telepresence Video Communication Servers Software	Version x7.0.2
Cisco Telepresence Video Communication Servers Software	Version x7.0.3
Cisco Telepresence Video Communication Servers Software	Version x7.0

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (14)

http://osvdb.org/102363

Source: psirt@cisco.com

Broken Link

http://secunia.com/advisories/56592

Source: psirt@cisco.com

Permissions Required

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140122-vcs

Source: psirt@cisco.com

Vendor Advisory

http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=32409

Source: psirt@cisco.com

Vendor Advisory

http://www.securityfocus.com/bid/65076

Source: psirt@cisco.com

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1029655

Source: psirt@cisco.com

Third Party AdvisoryVDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/90621

Source: psirt@cisco.com

http://osvdb.org/102363

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://secunia.com/advisories/56592

Source: af854a3a-2127-422b-91ae-364da2661108

Permissions Required

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140122-vcs

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=32409

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/bid/65076

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1029655

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/90621

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.