Code injection

The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x allows remote attackers to cause a denial of service device reload via crafted SIP packets, aka Bug ID CSCua64961...

CVE-2014-2156

The CVE-2014-2156 issue affects Cisco TelePresence MXP Series Software prior to F9.3.1. It describes a denial-of-service condition where remote attackers can cause a device reload by sending crafted SIP packets, due to a flaw in the SIP implementation (Bug ID CSCty45739). The vulnerability is exp...

CVE-2014-2166

The SIP implementation in Cisco TelePresence TC Software 4.x and TE Software 4.x allows remote attackers to cause a denial of service device reload via crafted SIP packets, aka Bug ID CSCto70562...

CVE-2014-2163

The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x allows remote attackers to cause a denial of service device reload via crafted SIP packets, aka Bug ID CSCua64961...

CVE-2014-2166

CVE-2014-2166 concerns Cisco TelePresence TC/TE Software 4.x where a flaw in the SIP implementation can be triggered by crafted SIP packets, causing a denial of service (device reload). The vulnerability is part of a set of SIP-related DoS issues in the Cisco TelePresence TC/TE software family (B...

CVE-2014-2157

Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service device reload via crafted SIP packets, aka Bug ID CSCty45733...

CVE-2014-2167

Cisco TelePresence TC/TE Software SIP stack vulnerability (CVE-2014-2167) allows remote denial of service via crafted SIP packets, causing a device reload. Affected: TC Software 4.x/5.x and TE Software 4.x/6.0. Root cause is in the SIP implementation as noted in Cisco advisory CSCua86589 (and rel...

CVE-2014-2158

Cisco TelePresence MXP Series Software prior to F9.3.1 is affected by CVE-2014-2158 due to a flaw in the SIP implementation that can be exploited by crafted SIP packets to cause a device reload (DoS). The Cisco advisory indicates updates have been released to address these vulnerabilities; upgrad...

CVE-2014-2171

Heap-based buffer overflow in Cisco TelePresence TC Software 4.x through 6.x before 6.0.1 and TE Software 4.x and 6.0.x before 6.0.2 allows remote attackers to execute arbitrary code via crafted SIP packets, aka Bug ID CSCud81796...

CVE-2014-2162

CVE-2014-2162 affects Cisco TelePresence TC Software (4.x/5.x) and TE Software (4.x/6.0). The vulnerability stems from the SIP implementation, allowing remote attackers to cause a denial of service (device reload) by sending crafted SIP packets. Several connected advisories (Cisco and third‑party...

CVE-2014-2164

CVE-2014-2164 affects Cisco TelePresence TC Software 4.x/5.x and TE Software 4.x/6.0. The vulnerability is in the SIP implementation and allows remote attackers to cause a denial of service (device reload) by sending crafted SIP packets (Bug ID CSCuj94651). NVD/CVSS metrics indicate a public netw...

CVE-2014-2165

Cisco TelePresence TC and TE Software (TC: 4.x/5.x; TE: 4.x and 6.0) are affected by multiple SIP-related DoS and code execution vulnerabilities. For CVE-2014-2165, a flaw in the SIP implementation can allow remote attackers to cause a device reload by sending crafted SIP packets. The Cisco advis...

CVE-2014-2162

The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to cause a denial of service device reload via crafted SIP packets, aka Bug ID CSCud29566...

CVE-2014-2165

The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to cause a denial of service device reload via crafted SIP packets, aka Bug ID CSCtq72699...

CVE-2014-2163

CVE-2014-2163 affects Cisco TelePresence TC and TE Software (4.x and 5.x). The vulnerability lies in the SIP implementation, where crafted SIP packets can cause a denial-of-service resulting in a device reload. The issue is documented across multiple sources (Cisco advisory Cisco-SA-20140430-TCTE...

CVE-2014-2167

The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to cause a denial of service device reload via crafted SIP packets, aka Bug ID CSCua86589...

CVE-2014-2164

The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to cause a denial of service device reload via crafted SIP packets, aka Bug ID CSCuj94651...

Cisco ASA SIP Inspection DoS (CSCuf67469)

The remote Cisco Adaptive Security Appliance ASA Software contains a vulnerability that could allow an unauthenticated, remote attacker to cause a memory leak which can be exploited to create a denial of service condition. The vulnerability is due to improper handling of Session Initiation Protoc...

Multiple Vulnerabilities in Cisco TelePresence System MXP Series

Cisco TelePresence System MXP Series Software contains the following vulnerabilities: Three SIP denial of service vulnerabilities Three H.225 denial of service vulnerabilities Successful exploitation of these vulnerabilities may allow an attacker to cause system instability and the affected syste...

Multiple Vulnerabilities in Cisco TelePresence TC and TE Software

Cisco TelePresence TC and TE Software are affected by the following vulnerabilities: Six Session Initiation Protocol SIP denial of service vulnerabilities Cisco TelePresence TC and TE Software DNS Buffer Overflow Vulnerability Cisco TelePresence TC and TE Software Input Validation Vulnerability...