CVE-2014-3362
published 2014-09-12CVE-2014-3362: Memory leak in Cisco TelePresence System Edge MXP Series Software F9.3.3 and earlier allows remote attackers to cause a denial of service (management outage)…
PriorityP434high7.8CVSS 2.0
AVNACLAuNCNINAC
EPSS
2.75%
84.5th percentile
Memory leak in Cisco TelePresence System Edge MXP Series Software F9.3.3 and earlier allows remote attackers to cause a denial of service (management outage) via multiple TELNET connections, aka Bug ID CSCuo63677.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | telepresence_system_software | <= f9.3.3 | — |
| cisco | telepresence_system_software | — | — |
| cisco | telepresence_system_software | — | — |
| cisco | telepresence_system_software | — | — |
| cisco | telepresence_system_software | — | — |
| cisco | telepresence_system_software | — | — |
| cisco | telepresence_system_software | — | — |
| cisco | telepresence_system_software | — | — |
| cisco | telepresence_system_software | — | — |
| cisco | telepresence_system_software | — | — |
| cisco | telepresence_system_software | — | — |
| cisco | telepresence_system_software | — | — |
CVSS provenance
nvdv2.07.8HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C
vendor_cisco7.8HIGH
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-x7jh-mr32-x78c: Memory leak in Cisco TelePresence System Edge MXP Series Software F9
ghsa_unreviewed·2022-05-17
CVE-2014-3362 [HIGH] GHSA-x7jh-mr32-x78c: Memory leak in Cisco TelePresence System Edge MXP Series Software F9
Memory leak in Cisco TelePresence System Edge MXP Series Software F9.3.3 and earlier allows remote attackers to cause a denial of service (management outage) via multiple TELNET connections, aka Bug ID CSCuo63677.
Cisco
Cisco TelePresence System MXP Series Software Denial of Service Vulnerability
vendor_cisco·2014-09-11·CVSS 7.8
CVE-2014-3362 [HIGH] CWE-399 Cisco TelePresence System MXP Series Software Denial of Service Vulnerability
Cisco TelePresence System MXP Series Software Denial of Service Vulnerability
A vulnerability in Cisco TelePresence System MXP Series Software could allow an unauthenticated, remote attacker to cause an affected system to become unresponsive to management session requests via Telnet.
The vulnerability is due to a memory leak when management flows are created. An attacker could exploit this vulnerability by creating several management session requests.
Cisco has confirmed the vulnerability in a security notice; however, software updates are not available.
To exploit this vulnerability, an attacker must determine whether the Telnet service is running on a targeted device.
All MXP products have reached end of life (EOL) and end of software support (EoSW). Customer are advised to review
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://secunia.com/advisories/61072http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3362http://tools.cisco.com/security/center/viewAlert.x?alertId=35674https://exchange.xforce.ibmcloud.com/vulnerabilities/95883http://secunia.com/advisories/61072http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3362http://tools.cisco.com/security/center/viewAlert.x?alertId=35674https://exchange.xforce.ibmcloud.com/vulnerabilities/95883
2014-09-12
Published