HIGH · 7.1

CVE-2014-0662

The SIP module in Cisco TelePresence Video Communication Server (VCS) before 8.1 allows remote attackers to cause a denial of service (process failure) via a crafted SDP message, aka Bug ID CSCue97632...

Vulnerability Description

The SIP module in Cisco TelePresence Video Communication Server (VCS) before 8.1 allows remote attackers to cause a denial of service (process failure) via a crafted SDP message, aka Bug ID CSCue97632.

CVSS Score

7.1

HIGH

AV:N/AC:M/Au:N/C:N/I:N/A:C
Confidentiality
NONE
Integrity
NONE
Availability
COMPLETE

Affected Products

VendorProductVersions
CiscoTelepresence Video Communication Server Software<= x7.2.2
CiscoTelepresence Video Communication Servers Softwarex7.0

Related Weaknesses (CWE)

References

FAQ

What is CVE-2014-0662?

CVE-2014-0662 is a vulnerability with a CVSS score of 7.1 (HIGH). The SIP module in Cisco TelePresence Video Communication Server (VCS) before 8.1 allows remote attackers to cause a denial of service (process failure) via a crafted SDP message, aka Bug ID CSCue97632...

How severe is CVE-2014-0662?

CVE-2014-0662 has been rated HIGH with a CVSS base score of 7.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2014-0662?

Check the references section above for vendor advisories and patch information. Affected products include: Cisco Telepresence Video Communication Server Software, Cisco Telepresence Video Communication Servers Software.