CyberSec.Space Logo
Back to CVE Browser

CVE-2015-0652

HIGH
7.8
CVSS Severity Score
EPSS Score0.1520%
EPSS Percentile9.65th
PublishedMar 13, 2015
Last ModifiedMay 6, 2026

Vulnerability Description

The Session Description Protocol (SDP) implementation in Cisco TelePresence Video Communication Server (VCS) and Cisco Expressway before X8.2 and Cisco TelePresence Conductor before XC2.4 allows remote attackers to cause a denial of service (mishandled exception and device reload) via a crafted media description, aka Bug IDs CSCus96593 and CSCun73192.

Affected Platforms (CPE)

📦
Cisco

Expressway Software

<= x8.1.1
📦
Cisco

Telepresence Conductor

<= xc2.4
📦
Cisco

Telepresence Video Communication Server Software

<= x8.1.1

References & Advisories

🔗 http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150311-vcs
🔗 http://www.securitytracker.com/id/1031910
🔗 http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150311-vcs
🔗 http://www.securitytracker.com/id/1031910

Related Vulnerabilities

CVE-2017-37908.6

A vulnerability in the received packet parser of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) s...

CVE-2014-33687.8

Cisco TelePresence Video Communication Server (VCS) and Expressway Software before X8.2 allow remote attackers to cause a denial o...

CVE-2014-33707.1

Cisco TelePresence Video Communication Server (VCS) and Expressway Software before X8.1.1 allow remote attackers to cause a denial...

CVE-2014-33697.1

The SIP IX implementation in Cisco TelePresence Video Communication Server (VCS) and Expressway Software before X8.1.1 allows remo...