Vulnslist

find the latest Cisco vulnerabilities

Cisco TelePresence Video Communication Server Denial of Service Vulnerability

cisco-sa-20160309-vcs · Medium · Published · Updated

A vulnerability in the Session Initiation Protocol (SIP) message handling process of Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to incorrect processing of specific incoming SIP messages. An attacker could exploit this vulnerability by sending a malicious SIP message to an affected device. A successful exploit could allow the attacker to cause the device to stop processing VoIP calls. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160309-vcs

Cisco advisory · CSAF JSON

Workarounds

There are no workarounds that address this vulnerability.

CVEsCVE-2016-1338
Cisco Bug IDsCSCuu43026
CVSS ScoreBase 6.8
Base 6.8 AV:N/AC:L/Au:S/C:N/I:N/A:C/E:F/RL:OF/RC:C
Product Names From Source
Cisco TelePresence Video Communication Server (VCS)

Related Products

Product CVE Evidence
Cisco TelePresence Video Communication Server (VCS) CVE-2016-1338 Cisco OpenVuln
Cisco TelePresence CVE-2016-1338 Cisco OpenVuln