CVEブラウザに戻る

CVE-2015-0652

HIGH

7.8

CVSS Severity Score

EPSS Score0.1520%

EPSS Percentile9.65th

Published2015年3月13日

Last Modified2026年5月6日

Vulnerability Description

The Session Description Protocol (SDP) implementation in Cisco TelePresence Video Communication Server (VCS) and Cisco Expressway before X8.2 and Cisco TelePresence Conductor before XC2.4 allows remote attackers to cause a denial of service (mishandled exception and device reload) via a crafted media description, aka Bug IDs CSCus96593 and CSCun73192.

Affected Platforms (CPE)

📦

Cisco

Expressway Software

<= x8.1.1

📦

Cisco

Telepresence Conductor

<= xc2.4

📦

Cisco

Telepresence Video Communication Server Software

<= x8.1.1

References & Advisories

🔗 http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150311-vcs

🔗 http://www.securitytracker.com/id/1031910

🔗 http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150311-vcs

🔗 http://www.securitytracker.com/id/1031910

関連する脆弱性情報

CVE-2017-37908.6

A vulnerability in the received packet parser of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) s...

CVE-2014-33687.8

Cisco TelePresence Video Communication Server (VCS) and Expressway Software before X8.2 allow remote attackers to cause a denial o...

CVE-2014-33707.1

Cisco TelePresence Video Communication Server (VCS) and Expressway Software before X8.1.1 allow remote attackers to cause a denial...

CVE-2014-33697.1

The SIP IX implementation in Cisco TelePresence Video Communication Server (VCS) and Expressway Software before X8.1.1 allows remo...