CVE-2014-3370

CWE-399 CWE-20 — Improper Input Validation4 documents4 sources

Severity

7.1HIGH

EPSS

0.7%

top 28.44%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Cisco Expressway Software Cisco Telepresence Video Communication Server Software

Timeline

PublishedOct 19

Latest updateMay 17

Description

Cisco TelePresence Video Communication Server (VCS) and Expressway Software before X8.1.1 allow remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug IDs CSCum60442 and CSCum60447.

CVSS vector

AV:N/AC:M/C:N/I:N/A:CExploitability: 8.6 | Impact: 6.9

Affected Packages2 packages

▶NVDcisco/telepresence_video_communicationx8.1

▶NVDcisco/expressway_softwarex8.1

🔴Vulnerability Details

GHSA

GHSA-f666-7q5v-fcx5: Cisco TelePresence Video Communication Server (VCS) and Expressway Software before X8↗2022-05-17

▶

CVEList

CVE-2014-3370: Cisco TelePresence Video Communication Server (VCS) and Expressway Software before X8↗2014-10-19

▶

📋Vendor Advisories

Cisco

Multiple Vulnerabilities in Cisco TelePresence Video Communication Server and Cisco Expressway Software↗2014-10-15

▶