Detections
Analytics

Cisco TelePresence MXP Series Software Multiple Vulnerabilities (cisco-sa-20140430-mxp)

high Nessus Plugin ID 73915

Language:

Synopsis

The remote host is missing a vendor-supplied security patch.

Description

The version of Cisco TelePresence MXP Series software running on the remote host is affected by one or more of the following issues :

 - A denial of service vulnerability exists due to a flaw in the SIP implementation, potentially allowing a remote attacker to cause a device reload by sending crafted SIP packets. (CVE-2014-2156 / CSCty45739)

 - A denial of service vulnerability exists due to a flaw in the SIP implementation, potentially allowing a remote attacker to cause a device reload by sending crafted SIP packets. (CVE-2014-2157 / CSCty45733)

 - A denial of service vulnerability exists due to a flaw in the SIP implementation, potentially allowing a remote attacker to cause a device reload by sending crafted SIP packets. (CVE-2014-2158 / CSCty45720)

 - A denial of service vulnerability exists due to a flaw in the H.225 subsystem, potentially allowing a remote attacker to cause a device reload by sending crafted packets. (CVE-2014-2159 / CSCtq78722)

 - A denial of service vulnerability exists due to a flaw in the H.225 subsystem, potentially allowing a remote attacker to cause a device reload by sending crafted packets. (CVE-2014-2160 / CSCty45745)

 - A denial of service vulnerability exists due to a flaw in the H.225 subsystem, potentially allowing a remote attacker to cause a device reload by sending crafted packets. (CVE-2014-2161 / CSCty45731)

Solution

Upgrade to the relevant Cisco TelePresence MXP series software version referenced in Cisco Security Advisory cisco-sa-20140430-mxp.

See Also

http://www.nessus.org/u?e8765a09

Plugin Details

Severity: High

ID: 73915

File Name: cisco-sa-20140430-mxp.nasl

Version: 1.4

Type: remote

Family: CISCO

Published: 5/8/2014

Updated: 11/15/2018

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Low

Score: 3.6

CVSS v2

Risk Factor: High

Base Score: 7.8

Temporal Score: 5.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C

Vulnerability Information

CPE: cpe:/a:cisco:telepresence_system_software

Required KB Items: Cisco/TelePresence_MCU/Device, Cisco/TelePresence_MCU/Version

Exploit Ease: No known exploits are available

Patch Publication Date: 4/30/2014

Vulnerability Publication Date: 4/30/2014

Reference Information

CVE: CVE-2014-2156, CVE-2014-2157, CVE-2014-2158, CVE-2014-2159, CVE-2014-2160, CVE-2014-2161

BID: 67166, 67167