Published: 12/03/2016 Updated: 19/03/2016

CVSS v2 Base Score: 8 | Impact Score: 8.5 | Exploitability Score: 8

CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8

VMScore: 712

Vector: AV:N/AC:L/Au:S/C:P/I:P/A:C

Subscribe to Telepresence Video Communication Server Software

A vulnerability in the Session Initiation Protocol (SIP) message handling process of Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote malicious user to cause a denial of service (DoS) condition. The vulnerability is due to incorrect processing of specific incoming SIP messages. An attacker could exploit this vulnerability by sending a malicious SIP message to an affected device. A successful exploit could allow the malicious user to cause the device to stop processing VoIP calls. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link: tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160309-vcs

Vulnerable Product	Search on Vulmon	Subscribe to Product
cisco telepresence video communication server software x8.5.1
cisco telepresence video communication server software x8.5.2

A vulnerability in the Session Initiation Protocol (SIP) message handling process of Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker to cause a denial of service (DoS) condition The vulnerability is due to incorrect processing of specific incoming SIP messages An attacker could exploit this vulne ...

CWE-20 CWE-399 http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160309-vcs https://nvd.nist.gov http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160309-vcs

CVE-2016-1338

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect