Lucene search

K
ciscoCiscoCISCO-SA-20150916-TPS
HistorySep 16, 2015 - 4:00 p.m.

Cisco TelePresence Server Denial of Service Vulnerability

2015-09-1616:00:00
tools.cisco.com
25

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

EPSS

0.001

Percentile

48.6%

Cisco TelePresence Server contains a buffer overflow vulnerability in the Conference Control Protocol API that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition.

Cisco has released software updates that address this vulnerability. No workarounds that mitigate this vulnerability are available.

This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150916-tps [“https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150916-tps”]

Affected configurations

Vulners
Node
ciscotelepresence_server_softwareMatchany
OR
ciscotelepresence_server_softwareMatchany
VendorProductVersionCPE
ciscotelepresence_server_softwareanycpe:2.3:a:cisco:telepresence_server_software:any:*:*:*:*:*:*:*

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

EPSS

0.001

Percentile

48.6%