CVE-2015-0652

CVE-2015-0652 affects Cisco TelePresence VCS, Cisco Expressway (before X8.2) and Cisco TelePresence Conductor (before XC2.4). The SDP packet handler vulnerability allows a remote, unauthenticated attacker to cause a denial of service (mishandled exception and device reload) via a crafted SDP medi...

Cisco TelePresence Video Communication Server (VCS) /Expressway Vulnerabilities

Cisco TelePresence Video Communication Server VCS, Cisco Expressway, and Cisco TelePresence Conductor are Cisco TelePresence video communication servers that integrate with Unified Communications and voice communication environments to provide a best-in-class experience for end users using a...

PT-2015-4781

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Video Communication Server VCS versions prior to X8.2 Cisco Expressway versions prior to X8.2 Cisco TelePresence Conductor versions prior to XC2.4 Description The issue is related to the Session Description Protocol SDP...

CVE-2015-0653: Improper Authentication

The management interface in Cisco TelePresence Video Communication Server VCS and Cisco Expressway before X7.2.4, X8 before X8.1.2, and X8.2 before X8.2.2 and Cisco TelePresence Conductor before X2.3.1 and XC2.4 before XC2.4.1 allows remote attackers to bypass authentication via crafted login...

CVE-2015-0652: Improper Input Validation

The Session Description Protocol SDP implementation in Cisco TelePresence Video Communication Server VCS and Cisco Expressway before X8.2 and Cisco TelePresence Conductor before XC2.4 allows remote attackers to cause a denial of service mishandled exception and device reload via a crafted media...

PT-2015-1313

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Video Communication Server VCS versions prior to X7.2.4 Cisco TelePresence Video Communication Server VCS versions X8 prior to X8.1.2 Cisco TelePresence Video Communication Server VCS versions X8.2 prior to X8.2.2 Cisco...

Multiple Vulnerabilities in Cisco TelePresence Video Communication Server, Cisco Expressway, and Cisco TelePresence Conductor

Cisco TelePresence Video Communication Server VCS, Cisco Expressway and Cisco TelePresence Conductor contain the following vulnerabilities: SDP Media Description Denial of Service Vulnerability Authentication Bypass Vulnerability Successful exploitation of the SDP Media Description Denial of...

Cisco TelePresence VCS and Expressway High CPU Utilization Vulnerability

A vulnerability in the SIP code of Cisco TelePresence Video Communication Server VCS and Cisco Expressway could allow an unauthenticated, remote attacker to cause high memory consumption and CPU utilization, which could cause some services to become unavailable and degrade performance. The...

Cisco TelePresence Video Communication Server/Expressway Denial of Service Vulnerability

Cisco TelePresence Video Communication Server is a video conferencing solution that integrates h.323 and SIP. A denial of service vulnerability exists in Cisco TelePresence Video Communication Server/Expressway, which allows remote attackers to launch denial of service attacks via crafted SIP...

CVE-2015-0579

Cisco TelePresence Video Communication Server VCS and Cisco Expressway allow remote attackers to cause a denial of service memory and CPU consumption, and partial outage via crafted SIP packets, aka Bug ID CSCur12473...

Code injection

Cisco TelePresence Video Communication Server VCS and Cisco Expressway allow remote attackers to cause a denial of service memory and CPU consumption, and partial outage via crafted SIP packets, aka Bug ID CSCur12473...

CVE-2015-0579

The CVE-2015-0579 issue affects Cisco TelePresence Video Communication Server (VCS) and Cisco Expressway. The root cause is insufficient validation of crafted SIP packets in the SIP handling code, allowing an unauthenticated remote attacker to trigger memory and CPU exhaustion, leading to a denia...

CVE-2015-0579

Cisco TelePresence Video Communication Server VCS and Cisco Expressway allow remote attackers to cause a denial of service memory and CPU consumption, and partial outage via crafted SIP packets, aka Bug ID CSCur12473...

CVE-2015-0579: Undefined Security Weakness

Cisco TelePresence Video Communication Server VCS and Cisco Expressway allow remote attackers to cause a denial of service memory and CPU consumption, and partial outage via crafted SIP packets, aka Bug ID CSCur12473...

PT-2015-4726

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Video Communication Server VCS and Cisco Expressway affected versions not specified Description The issue allows remote attackers to cause a denial of service, resulting in memory and CPU consumption, and partial outage, via...

Cisco TelePresence VCS / Expressway Series < 8.2 Multiple DoS Vulnerabilities

According to the self-reported version, returned by a standard SNMP request, the version of the Cisco TelePresence VCS or Expressway Series device prior to 8.2. It is, therefore, potentially affected by multiple denial of service vulnerabilities : - A flaw exists in packet processing when...

CVE-2014-3370

Cisco TelePresence Video Communication Server VCS and Expressway Software before X8.1.1 allow remote attackers to cause a denial of service device reload via crafted SIP packets, aka Bug IDs CSCum60442 and CSCum60447...

CVE-2014-3368

Cisco TelePresence Video Communication Server VCS and Expressway Software before X8.2 allow remote attackers to cause a denial of service device reload via a high rate of crafted packets, aka Bug ID CSCui06507...

CVE-2014-3369

The SIP IX implementation in Cisco TelePresence Video Communication Server VCS and Expressway Software before X8.1.1 allows remote attackers to cause a denial of service device reload via crafted SDP packets, aka Bug ID CSCuo42252...

Code injection

Cisco TelePresence Video Communication Server VCS and Expressway Software before X8.2 allow remote attackers to cause a denial of service device reload via a high rate of crafted packets, aka Bug ID CSCui06507...