CVE-2014-3368

CWE-399 CWE-20 — Improper Input Validation4 documents4 sources

Severity

7.8HIGH

EPSS

0.5%

top 34.12%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Cisco Expressway Software Cisco Telepresence Video Communication Server Software

Timeline

PublishedOct 19

Latest updateMay 17

Description

Cisco TelePresence Video Communication Server (VCS) and Expressway Software before X8.2 allow remote attackers to cause a denial of service (device reload) via a high rate of crafted packets, aka Bug ID CSCui06507.

CVSS vector

AV:N/AC:L/C:N/I:N/A:CExploitability: 10.0 | Impact: 6.9

Affected Packages2 packages

▶NVDcisco/telepresence_video_communicationx8.1

▶NVDcisco/expressway_softwarex8.1

🔴Vulnerability Details

GHSA

GHSA-w62x-587h-wg93: Cisco TelePresence Video Communication Server (VCS) and Expressway Software before X8↗2022-05-17

▶

CVEList

CVE-2014-3368: Cisco TelePresence Video Communication Server (VCS) and Expressway Software before X8↗2014-10-19

▶

📋Vendor Advisories

Cisco

Multiple Vulnerabilities in Cisco TelePresence Video Communication Server and Cisco Expressway Software↗2014-10-15

▶