Session fixation

2015-03-1301:59:00

PRIOn knowledge base

www.prio-n.com

7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.0%

JSON

The Session Description Protocol (SDP) implementation in Cisco TelePresence Video Communication Server (VCS) and Cisco Expressway before X8.2 and Cisco TelePresence Conductor before XC2.4 allows remote attackers to cause a denial of service (mishandled exception and device reload) via a crafted media description, aka Bug IDs CSCus96593 and CSCun73192.

CPENameOperatorVersion
expressway_softwareeq<= x8.1.1
telepresence_conductoreq<= xc2.4
telepresence_video_communication_server_softwareeq<= x8.1.1

Name	Operator	Version
expressway_software	eq	<= x8.1.1
telepresence_conductor	eq	<= xc2.4
telepresence_video_communication_server_software	eq	<= x8.1.1

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150311-vcs

www.securitytracker.com/id/1031910