Unsupported Cisco MXP Series Device

The remote host is a Cisco MXP series device. Cisco has discontinued support for all MXP series devices. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities. C Tenable Network Security,...

Cisco TelePresence MXP Series Software Multiple Vulnerabilities (cisco-sa-20140430-mxp)

The version of Cisco TelePresence MXP Series software running on the remote host is affected by one or more of the following issues : - A denial of service vulnerability exists due to a flaw in the SIP implementation, potentially allowing a remote attacker to cause a device reload by sending...

CVE-2014-2158

Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service device reload via crafted SIP packets, aka Bug ID CSCty45720...

CVE-2014-2156

The CVE-2014-2156 issue affects Cisco TelePresence MXP Series Software prior to F9.3.1. It describes a denial-of-service condition where remote attackers can cause a device reload by sending crafted SIP packets, due to a flaw in the SIP implementation (Bug ID CSCty45739). The vulnerability is exp...

CVE-2014-2158

Cisco TelePresence MXP Series Software prior to F9.3.1 is affected by CVE-2014-2158 due to a flaw in the SIP implementation that can be exploited by crafted SIP packets to cause a device reload (DoS). The Cisco advisory indicates updates have been released to address these vulnerabilities; upgrad...

Tandberg MXP Series Video Conferencing Device <= F8.2 Remote DoS Vulnerability

Tandberg MXP Series devices are prone to a remote denial of service DoS vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2011-2544

CVE-2011-2544 is a post-authentication XSS in the Cisco TelePresence System MXP Series web interface (MXP, F9.1 and earlier) triggered by a crafted Call ID. The flaw allows arbitrary HTML/script injection and enables CSRF-driven actions such as password changes, via improper input validation in C...