- Description
- The Session Description Protocol (SDP) implementation in Cisco TelePresence Video Communication Server (VCS) and Cisco Expressway before X8.2 and Cisco TelePresence Conductor before XC2.4 allows remote attackers to cause a denial of service (mishandled exception and device reload) via a crafted media description, aka Bug IDs CSCus96593 and CSCun73192.
- Source
- ykramarz@cisco.com
- NVD status
- Modified
CVSS 2.0
- Type
- Primary
- Base score
- 7.8
- Impact score
- 6.9
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:N/I:N/A:C
- nvd@nist.gov
- CWE-20
- Hype score
- Not currently trending
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cisco:expressway_software:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7C4F0567-47F3-4AAE-AA88-BC57CEE1E9D3",
"versionEndIncluding": "x8.1.1"
},
{
"criteria": "cpe:2.3:a:cisco:telepresence_conductor:*:prealpha0:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4430B1D1-064A-4487-9435-412F32FA9666",
"versionEndIncluding": "xc2.4"
},
{
"criteria": "cpe:2.3:a:cisco:telepresence_video_communication_server_software:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6B376331-5315-4E55-8D7D-04529E233E7D",
"versionEndIncluding": "x8.1.1"
}
],
"operator": "OR"
}
]
}
]