Denial of Service Vulnerability in Cisco TelePresence Video Communication Server
CVE-2015-0772

Currently unrated

Key Information:

Vendor
Cisco
Status
Telepresence Video Communication Server Software
Vendor
CVE Published:
12 June 2015

Summary

A vulnerability exists in Cisco's TelePresence Video Communication Server X8.5RC4 that allows remote attackers to trigger a denial of service. This can occur through the manipulation of Session Description Protocol (SDP) parameters during a Session Initiation Protocol (SIP) connection. By sending crafted requests, an attacker can exploit this flaw, leading to excessive CPU consumption or even a complete device outage.

References

http://tools.cisco.com/security/center/viewAlert.x?alertI...
vendor-advisoryx_refsource_CISCO
http://www.securitytracker.com/id/1032540
vdb-entryx_refsource_SECTRACK

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.