Cisco Unified Border Element Denial of Service Vulnerability

A vulnerability in the Session Initiation Protocol SIP functionality of Cisco Unified Border Element CUBE could allow an unauthenticated, remote attacker to trigger a denial of service DoS condition. The vulnerability is due to incorrect processing of SIP messages. An attacker could exploit this...

Asterisk SIP Invite Malformed SDP Denial of Service (CVE-2007-1561)

A denial of service vulnerability exists in the channel driver of Asterisk. A remote attacker may send a SIP INVITE message with an SDP containing one valid and one invalid IP address, causing the server to crash...

CVE-2015-6310

The REST interface in Cisco Unified Communications Manager IM and Presence Service 11.51 allows remote attackers to cause a denial of service SIP proxy service restart via a crafted HTTP request, aka Bug ID CSCuw31632...

Design/Logic Flaw

The REST interface in Cisco Unified Communications Manager IM and Presence Service 11.51 allows remote attackers to cause a denial of service SIP proxy service restart via a crafted HTTP request, aka Bug ID CSCuw31632...

CVE-2015-6310

The REST interface in Cisco Unified Communications Manager IM and Presence Service 11.51 allows remote attackers to cause a denial of service SIP proxy service restart via a crafted HTTP request, aka Bug ID CSCuw31632...

CVE-2015-6310

The CVE-2015-6310 vulnerability affects Cisco Unified Communications Manager IM and Presence Service REST API (CUCM IM and Presence Service) and is caused by insufficient input validation in the REST interface. An unauthenticated, remote attacker can send a crafted HTTP request to trigger a denia...

Cisco Unified Communications Manager IM and Presence Service REST API Denial of Service Vulnerability

A vulnerability in the Representational State Transfer REST interface of the Cisco Unified Communications Manager IM and Presence Service could allow an unauthenticated, remote attacker to cause a partial denial of service DoS condition because the Cisco Session Initiation Protocol SIP proxy...

CVE-2015-6271

Cisco IOS XE 2.1.0 through 2.4.3 and 2.5.0 on ASR 1000 devices, when NAT Application Layer Gateway is used, allows remote attackers to cause a denial of service Embedded Services Processor crash via a crafted SIP packet, aka Bug IDs CSCta74749 and CSCta77008...

Design/Logic Flaw

Cisco IOS XE 2.1.0 through 2.4.3 and 2.5.0 on ASR 1000 devices, when NAT Application Layer Gateway is used, allows remote attackers to cause a denial of service Embedded Services Processor crash via a crafted SIP packet, aka Bug IDs CSCta74749 and CSCta77008...

CVE-2015-6271

Cisco IOS XE 2.1.0 through 2.4.3 and 2.5.0 on ASR 1000 devices, when NAT Application Layer Gateway is used, allows remote attackers to cause a denial of service Embedded Services Processor crash via a crafted SIP packet, aka Bug IDs CSCta74749 and CSCta77008...

CVE-2015-6271

CVE-2015-6271 affects Cisco IOS XE (versions 2.1.0–2.4.3 and 2.5.0) on ASR 1000 devices. When NAT Application Layer Gateway is enabled, remote attackers can cause a denial of service by sending crafted SIP packets that crash the Embedded Services Processor. This is documented with Bug IDs CSCta74...

Cisco TelePresence Video Communication Server (VCS) Detection (SIP)

SIP based detection of Cisco TelePresence Video Communication Server VCS. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cisco TelePresence Video Communication Server Expressway User Forgery Vulnerability

Cisco TelePresence Video Communication Server is a video conferencing solution that integrates h.323 and SIP. A security vulnerability exists in Cisco TelePresence Video Communication Server Expressway that allows remotely authenticated users to send special SIP messages to register for phone cal...

Cisco TelePresence Video Communication Server Expressway Access Vulnerability

A vulnerability in of the Cisco TelePresence Video Communication Server VCS Expressway could allow an authenticated, remote attacker to falsely register their Mobile and Remote Access MRA endpoint. The vulnerability is due to insufficient validation of the registering phone line. An attacker coul...

Shodan Scanner SIP Request

Shodan is a search engine for Internet-connected devices, which may be used to discover vulnerable devices connected to the Internet, as a preliminary stage before launching an attack...

Design/Logic Flaw

Cisco TelePresence Video Communication Server VCS X8.5RC4 allows remote attackers to cause a denial of service CPU consumption or device outage via a crafted SDP parameter-negotiation request in an SDP session during a SIP connection, aka Bug ID CSCut42422...

CVE-2015-0772

Cisco TelePresence Video Communication Server VCS X8.5RC4 allows remote attackers to cause a denial of service CPU consumption or device outage via a crafted SDP parameter-negotiation request in an SDP session during a SIP connection, aka Bug ID CSCut42422...

CVE-2015-0772

CVE-2015-0772 affects Cisco TelePresence Video Communication Server (VCS) X8.5RC4. The vulnerability is in the SDP parser during SDP parameter negotiation over SIP, caused by a parsing error in the SDP handling code. An unauthenticated, remote attacker can send a crafted SDP session parameter neg...

Cisco TelePresence Video Communication Server SDP Over SIP Denial of Service Vulnerability

A vulnerability in the Session Description Protocol SDP parser of the Cisco TelePresence Video Communication Server VCS could allow an unauthenticated, remote attacker to cause the Cisco VCS device to become unreachable due to a denial of service DoS attack caused by high CPU utilization. The...

Digium Asterisk res_pjsip_pubsub Module SIP SUBSCRIBE Type Confusion Denial of Service (CVE-2014-6609)

A denial of service vulnerability exists in Asterisk Open Source. The vulnerability is due to the way SIP SUBSCRIBE requests with unexpected mixes of headers for a given event package are handled. Remote, unauthenticated attackers could exploit this vulnerability by sending malformed SIP SUBSCRIB...