CVE-2015-0653

CVE-2015-0653 affects Cisco TelePresence VCS/Expressway, Cisco TelePresence Conductor, and XC2.4-era components, where the management interfaces allow remote authentication bypass via crafted login parameters. The root cause is inadequate validation of login parameters, enabling an attacker with ...

Cisco TelePresence Video Communication Server (VCS) /Expressway Vulnerabilities

Cisco TelePresence Video Communication Server VCS, Cisco Expressway, and Cisco TelePresence Conductor are Cisco TelePresence video communication servers that integrate with Unified Communications and voice communication environments to provide a best-in-class experience for end users using a...

Multiple Vulnerabilities in Cisco TelePresence Video Communication Server, Cisco Expressway, and Cisco TelePresence Conductor

Cisco TelePresence Video Communication Server VCS, Cisco Expressway and Cisco TelePresence Conductor contain the following vulnerabilities: SDP Media Description Denial of Service Vulnerability Authentication Bypass Vulnerability Successful exploitation of the SDP Media Description Denial of...

Cisco TelePresence VCS and Expressway High CPU Utilization Vulnerability

A vulnerability in the SIP code of Cisco TelePresence Video Communication Server VCS and Cisco Expressway could allow an unauthenticated, remote attacker to cause high memory consumption and CPU utilization, which could cause some services to become unavailable and degrade performance. The...

Cisco TelePresence Video Communication Server/Expressway Denial of Service Vulnerability

Cisco TelePresence Video Communication Server is a video conferencing solution that integrates h.323 and SIP. A denial of service vulnerability exists in Cisco TelePresence Video Communication Server/Expressway, which allows remote attackers to launch denial of service attacks via crafted SIP...

CVE-2015-0579

Cisco TelePresence Video Communication Server VCS and Cisco Expressway allow remote attackers to cause a denial of service memory and CPU consumption, and partial outage via crafted SIP packets, aka Bug ID CSCur12473...

Code injection

Cisco TelePresence Video Communication Server VCS and Cisco Expressway allow remote attackers to cause a denial of service memory and CPU consumption, and partial outage via crafted SIP packets, aka Bug ID CSCur12473...

CVE-2015-0579

Cisco TelePresence Video Communication Server VCS and Cisco Expressway allow remote attackers to cause a denial of service memory and CPU consumption, and partial outage via crafted SIP packets, aka Bug ID CSCur12473...

CVE-2015-0579

The CVE-2015-0579 issue affects Cisco TelePresence Video Communication Server (VCS) and Cisco Expressway. The root cause is insufficient validation of crafted SIP packets in the SIP handling code, allowing an unauthenticated remote attacker to trigger memory and CPU exhaustion, leading to a denia...

Cisco TelePresence VCS / Expressway Series < 8.2 Multiple DoS Vulnerabilities

According to the self-reported version, returned by a standard SNMP request, the version of the Cisco TelePresence VCS or Expressway Series device prior to 8.2. It is, therefore, potentially affected by multiple denial of service vulnerabilities : - A flaw exists in packet processing when...

CVE-2014-3368

Cisco TelePresence Video Communication Server VCS and Expressway Software before X8.2 allow remote attackers to cause a denial of service device reload via a high rate of crafted packets, aka Bug ID CSCui06507...

CVE-2014-3370

Cisco TelePresence Video Communication Server VCS and Expressway Software before X8.1.1 allow remote attackers to cause a denial of service device reload via crafted SIP packets, aka Bug IDs CSCum60442 and CSCum60447...

CVE-2014-3369

The SIP IX implementation in Cisco TelePresence Video Communication Server VCS and Expressway Software before X8.1.1 allows remote attackers to cause a denial of service device reload via crafted SDP packets, aka Bug ID CSCuo42252...

Code injection

Cisco TelePresence Video Communication Server VCS and Expressway Software before X8.2 allow remote attackers to cause a denial of service device reload via a high rate of crafted packets, aka Bug ID CSCui06507...

Code injection

Cisco TelePresence Video Communication Server VCS and Expressway Software before X8.1.1 allow remote attackers to cause a denial of service device reload via crafted SIP packets, aka Bug IDs CSCum60442 and CSCum60447...

CVE-2014-3369

Cisco TelePresence Video Communication Server (VCS) and Expressway Software prior to X8.1.1 are affected by a DoS vulnerability in the SIP IX implementation triggered by specially crafted SDP packets, causing a device reload. The issue is tied to CSCuo42252 (SIP IX) and is addressed by Cisco in a...

CVE-2014-3370

Cisco TelePresence Video Communication Server VCS and Expressway Software before X8.1.1 allow remote attackers to cause a denial of service device reload via crafted SIP packets, aka Bug IDs CSCum60442 and CSCum60447...

CVE-2014-3369

The SIP IX implementation in Cisco TelePresence Video Communication Server VCS and Expressway Software before X8.1.1 allows remote attackers to cause a denial of service device reload via crafted SDP packets, aka Bug ID CSCuo42252...

CVE-2014-3370

CVE-2014-3370 affects Cisco TelePresence Video Communication Server (VCS) and Cisco Expressway Software predating X8.1.1. A vulnerability in the SIP processing/module allows remote attackers to trigger a denial of service (device reload) via crafted SIP packets (Bug IDs CSCum60442, CSCum60447). D...

CVE-2014-3368

Cisco TelePresence Video Communication Server (VCS) and Cisco Expressway Software, versions prior to X8.2, are affected by CVE-2014-3368. A flaw in packet processing when handling a high rate of crafted IP packets can remotely cause a denial of service by triggering a device reload. Exploitation ...