EUVD-2014-2196

Malware in sbrugna...

EUVD-2014-3287

Malware in sbrugna...

EUVD-2013-3389

Malware in sbrugna...

Cisco Expressway Series Privilege Escalation

The vulnerability of password-changing functions in Cisco Expressway Series and Cisco Telepresence VCS devices is related to errors in processing password-change requests. Exploiting this vulnerability can allow a malicious actor to enhance their privileges by sending specially crafted passwords...

Cisco TelePresence VCS Access

The vulnerability of the control interface for microprogrammed software in Cisco TelePresence VCS devices is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to the device using a specially crafte...

Cisco TelePresence VCS and Conductor SDP Message Denial of Service Vulnerability

Cisco TelePresence is a telepresence conferencing solution developed by Cisco.Cisco Expressway is a video conferencing application. A security vulnerability in Cisco TelePresence VCS and Conductor SDP message handling allows attackers to exploit the vulnerability to submit special IPv4 or IPv6v6...

CVE-2014-3362: Undefined Security Weakness

Memory leak in Cisco TelePresence System Edge MXP Series Software F9.3.3 and earlier allows remote attackers to cause a denial of service management outage via multiple TELNET connections, aka Bug ID CSCuo63677...

PT-2014-5254

Name of the Vulnerable Software and Affected Versions Cisco TelePresence System Edge MXP Series Software versions F9.3.3 and earlier Description A memory leak issue allows remote attackers to cause a denial of service, resulting in a management outage. This can be achieved via multiple TELNET...

Cisco TelePresence System MXP Series Software Denial of Service Vulnerability

A vulnerability in Cisco TelePresence System MXP Series Software could allow an unauthenticated, remote attacker to cause an affected system to become unresponsive to management session requests via Telnet. The vulnerability is due to a memory leak when management flows are created. An attacker...

CVE-2014-3274

Cisco TelePresence System CTS 6.0.55 and earlier falls back to HTTP when certain HTTPS sessions cannot be established, which allows man-in-the-middle attackers to obtain sensitive directory information by leveraging a network position between CTS and Cisco Unified Communications Manager UCM to...

CVE-2014-3274

Cisco TelePresence System CTS 6.0.55 and earlier falls back to HTTP when certain HTTPS sessions cannot be established, which allows man-in-the-middle attackers to obtain sensitive directory information by leveraging a network position between CTS and Cisco Unified Communications Manager UCM to...

PT-2014-5170

Name of the Vulnerable Software and Affected Versions Cisco TelePresence System CTS versions 6.0.55 and earlier Description The issue allows man-in-the-middle attackers to obtain sensitive directory information by leveraging a network position between CTS and Cisco Unified Communications Manager...

CVE-2014-3274: Undefined Security Weakness

Cisco TelePresence System CTS 6.0.55 and earlier falls back to HTTP when certain HTTPS sessions cannot be established, which allows man-in-the-middle attackers to obtain sensitive directory information by leveraging a network position between CTS and Cisco Unified Communications Manager UCM to...

CVE-2014-2160

The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service device reload via crafted packets, aka Bug ID CSCty45745...

CVE-2014-2158: Improper Input Validation

Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service device reload via crafted SIP packets, aka Bug ID CSCty45720...

PT-2014-4517

Name of the Vulnerable Software and Affected Versions Cisco TelePresence System MXP Series Software versions prior to F9.3.1 Description The issue allows remote attackers to cause a denial of service, resulting in a device reload, via crafted packets. Recommendations For versions prior to F9.3.1,...

PT-2014-4516

Name of the Vulnerable Software and Affected Versions Cisco TelePresence System MXP Series Software versions prior to F9.3.1 Description The issue allows remote attackers to cause a denial of service, resulting in a device reload, by sending crafted SIP packets. Recommendations For versions prior...

PT-2014-4515

Name of the Vulnerable Software and Affected Versions Cisco TelePresence System MXP Series Software versions prior to F9.3.1 Description The issue allows remote attackers to cause a denial of service, resulting in a device reload, via crafted SIP packets. Recommendations For versions prior to...

CVE-2014-2157: Improper Input Validation

Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service device reload via crafted SIP packets, aka Bug ID CSCty45733...

PT-2014-4514

Name of the Vulnerable Software and Affected Versions Cisco TelePresence System MXP Series Software versions prior to F9.3.1 Description The issue allows remote attackers to cause a denial of service, resulting in a device reload, by sending crafted SIP packets. Recommendations For versions prior...