MINI-MXP9-CW9R-3552

Bulletin has no description...

EUVD-2009-3918

Malware in sbrugna...

Unsupported Cisco MXP Series Device

The remote host is a Cisco MXP series device. Cisco has discontinued support for all MXP series devices. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities. C Tenable Network Security,...

CVE-2014-3362: Undefined Security Weakness

Memory leak in Cisco TelePresence System Edge MXP Series Software F9.3.3 and earlier allows remote attackers to cause a denial of service management outage via multiple TELNET connections, aka Bug ID CSCuo63677...

Cisco TelePresence MXP Series Software Multiple Vulnerabilities (cisco-sa-20140430-mxp)

The version of Cisco TelePresence MXP Series software running on the remote host is affected by one or more of the following issues : - A denial of service vulnerability exists due to a flaw in the SIP implementation, potentially allowing a remote attacker to cause a device reload by sending...

CVE-2014-2156

Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service device reload via crafted SIP packets, aka Bug ID CSCty45739...

CVE-2014-2156

The CVE-2014-2156 issue affects Cisco TelePresence MXP Series Software prior to F9.3.1. It describes a denial-of-service condition where remote attackers can cause a device reload by sending crafted SIP packets, due to a flaw in the SIP implementation (Bug ID CSCty45739). The vulnerability is exp...

CVE-2014-2157

CVE-2014-2157 affects Cisco TelePresence System MXP Series Software prior to F9.3.1. The vulnerability arises from a flaw in the SIP implementation that allows remote attackers to trigger a device reload (DoS) by sending crafted SIP packets, as identified by Bug CSCty45733. The related Cisco advi...

CVE-2014-2158

Cisco TelePresence MXP Series Software prior to F9.3.1 is affected by CVE-2014-2158 due to a flaw in the SIP implementation that can be exploited by crafted SIP packets to cause a device reload (DoS). The Cisco advisory indicates updates have been released to address these vulnerabilities; upgrad...

CVE-2014-2158

Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service device reload via crafted SIP packets, aka Bug ID CSCty45720...

CVE-2014-2160: Improper Input Validation

The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service device reload via crafted packets, aka Bug ID CSCty45745...

CVE-2014-2159: Improper Input Validation

The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service device reload via crafted packets, aka Bug ID CSCtq78722...

CVE-2014-2158: Improper Input Validation

Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service device reload via crafted SIP packets, aka Bug ID CSCty45720...

CVE-2014-2161: Improper Input Validation

The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service device reload via crafted packets, aka Bug ID CSCty45731...

CVE-2014-2156: Improper Input Validation

Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service device reload via crafted SIP packets, aka Bug ID CSCty45739...

CVE-2014-2157: Improper Input Validation

Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service device reload via crafted SIP packets, aka Bug ID CSCty45733...

Tandberg MXP Series Video Conferencing Device <= F8.2 Remote DoS Vulnerability

Tandberg MXP Series devices are prone to a remote denial of service DoS vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Cisco TANDBERG MXP < 9.0 SNMP Packet Handling DoS

The remote host is running TANDBERG MXP Endpoint, an application used for video conferencing. According to the version number identified in the telnet banner, the TANDBERG MXP Endpoint version running on the remote host is less than F9.0. As such, the install is potentially affected by a remote...

CVE-2011-2544

CVE-2011-2544 is a post-authentication XSS in the Cisco TelePresence System MXP Series web interface (MXP, F9.1 and earlier) triggered by a crafted Call ID. The flaw allows arbitrary HTML/script injection and enables CSRF-driven actions such as password changes, via improper input validation in C...

CVE-2011-2544: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the web interface in Cisco TelePresence System MXP Series F9.1 and earlier allows remote authenticated users to inject arbitrary web script or HTML via a crafted Call ID, as demonstrated by resultant cross-site request forgery CSRF attacks that change...