Back to CVE Browser

CVE-2014-3397

HIGH

7.8

CVSS Severity Score

EPSS Score0.0380%

EPSS Percentile5.07th

PublishedOct 19, 2014

Last ModifiedMay 6, 2026

Vulnerability Description

The network stack in Cisco TelePresence MCU Software before 4.3(2.30) allows remote attackers to cause a denial of service (memory consumption) via crafted TCP packets, aka Bug ID CSCtz35468.

Affected Platforms (CPE)

📦

Cisco

Telepresence Mcu Software

<= 4.3\(2.18\)

References & Advisories

🔗 http://secunia.com/advisories/60855

🔗 http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141015-mcu

🔗 http://tools.cisco.com/security/center/viewAlert.x?alertId=36016

🔗 http://www.securitytracker.com/id/1031054

🔗 http://secunia.com/advisories/60855

🔗 http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141015-mcu

🔗 http://tools.cisco.com/security/center/viewAlert.x?alertId=36016

🔗 http://www.securitytracker.com/id/1031054

Related Vulnerabilities

CVE-2017-37929.8

A vulnerability in a proprietary device driver in the kernel of Cisco TelePresence Multipoint Control Unit (MCU) Software could al...

CVE-2015-07139.0

The web framework in Cisco TelePresence Advanced Media Gateway Series Software before 1.1(1.40), Cisco TelePresence IP Gateway Ser...

CVE-2015-06217.8

Cisco TelePresence MCU devices with software 4.5(1.45) allow remote attackers to cause a denial of service (device reload) via an ...

CVE-2015-42576.8

Cross-site request forgery (CSRF) vulnerability on Cisco TelePresence MCU 4500 devices with software 4.5(1.55) allows remote attac...