var-201503-0157
Vulnerability from variot
The Session Description Protocol (SDP) implementation in Cisco TelePresence Video Communication Server (VCS) and Cisco Expressway before X8.2 and Cisco TelePresence Conductor before XC2.4 allows remote attackers to cause a denial of service (mishandled exception and device reload) via a crafted media description, aka Bug IDs CSCus96593 and CSCun73192. Multiple Cisco products are prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to reload an affected device, denying service to legitimate users. This issue is being tracked by Cisco Bug ID CSCus96593 and CSCun73192
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201503-0157",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "telepresence video communication server software",
"scope": "lte",
"trust": 1.0,
"vendor": "cisco",
"version": "x8.1.1"
},
{
"model": "expressway software",
"scope": "lte",
"trust": 1.0,
"vendor": "cisco",
"version": "x8.1.1"
},
{
"model": "telepresence conductor",
"scope": "lte",
"trust": 1.0,
"vendor": "cisco",
"version": "xc2.4"
},
{
"model": "expressway software",
"scope": "lt",
"trust": 0.8,
"vendor": "cisco",
"version": "x8.2"
},
{
"model": "telepresence conductor",
"scope": "lt",
"trust": 0.8,
"vendor": "cisco",
"version": "xc2.4"
},
{
"model": "telepresence video communication server software",
"scope": "lt",
"trust": 0.8,
"vendor": "cisco",
"version": "x8.2"
},
{
"model": "expressway software",
"scope": "eq",
"trust": 0.6,
"vendor": "cisco",
"version": "x8.1.1"
},
{
"model": "telepresence conductor",
"scope": "eq",
"trust": 0.6,
"vendor": "cisco",
"version": "xc2.4"
},
{
"model": "telepresence video communication server software",
"scope": "eq",
"trust": 0.6,
"vendor": "cisco",
"version": "x8.1.1"
},
{
"model": "telepresence video communication server expressway",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "telepresence video communication server",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "x8.1.1"
},
{
"model": "telepresence video communication server base",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "x8.1"
},
{
"model": "telepresence video communication server",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "x7.2.2"
},
{
"model": "telepresence video communication server",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "x7.2.1"
},
{
"model": "telepresence video communication server base",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "x7.2"
},
{
"model": "telepresence video communication server base",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "x7.1"
},
{
"model": "telepresence video communication server",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "x7.0.3"
},
{
"model": "telepresence video communication server",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "x7.0.2"
},
{
"model": "telepresence video communication server",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "x7.0.1"
},
{
"model": "telepresence video communication server",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "x7.0.0"
},
{
"model": "telepresence video communication server base",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "x6.1"
},
{
"model": "telepresence video communication server base",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "x6.0"
},
{
"model": "telepresence video communication server base",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "x5.2"
},
{
"model": "telepresence vcs starter pack expressway",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "telepresence vcs control",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "telepresence conductor xc2.3.1",
"scope": null,
"trust": 0.3,
"vendor": "cisco",
"version": null
},
{
"model": "telepresence conductor xc2.3",
"scope": null,
"trust": 0.3,
"vendor": "cisco",
"version": null
},
{
"model": "telepresence conductor xc2.2.2",
"scope": null,
"trust": 0.3,
"vendor": "cisco",
"version": null
},
{
"model": "telepresence conductor xc2.0.3",
"scope": null,
"trust": 0.3,
"vendor": "cisco",
"version": null
},
{
"model": "telepresence conductor xc2.0.0",
"scope": null,
"trust": 0.3,
"vendor": "cisco",
"version": null
},
{
"model": "telepresence conductor xc1.2",
"scope": null,
"trust": 0.3,
"vendor": "cisco",
"version": null
},
{
"model": "telepresence conductor xc1.1",
"scope": null,
"trust": 0.3,
"vendor": "cisco",
"version": null
},
{
"model": "telepresence conductor xc1.0",
"scope": null,
"trust": 0.3,
"vendor": "cisco",
"version": null
},
{
"model": "telepresence conductor xc1",
"scope": null,
"trust": 0.3,
"vendor": "cisco",
"version": null
},
{
"model": "expressway edge",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "expressway core",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "expressway",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "x8.1.1"
},
{
"model": "expressway",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "x8.1"
}
],
"sources": [
{
"db": "BID",
"id": "73047"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-001809"
},
{
"db": "NVD",
"id": "CVE-2015-0652"
},
{
"db": "CNNVD",
"id": "CNNVD-201503-307"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:cisco:telepresence_video_communication_server_software:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "x8.1.1",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:cisco:expressway_software:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "x8.1.1",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:cisco:telepresence_conductor:*:prealpha0:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "xc2.4",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2015-0652"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Cisco",
"sources": [
{
"db": "BID",
"id": "73047"
}
],
"trust": 0.3
},
"cve": "CVE-2015-0652",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"acInsufInfo": false,
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "NVD",
"availabilityImpact": "COMPLETE",
"baseScore": 7.8,
"confidentialityImpact": "NONE",
"exploitabilityScore": 10.0,
"impactScore": 6.9,
"integrityImpact": "NONE",
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "HIGH",
"trust": 1.0,
"userInteractionRequired": false,
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Low",
"accessVector": "Network",
"authentication": "None",
"author": "NVD",
"availabilityImpact": "Complete",
"baseScore": 7.8,
"confidentialityImpact": "None",
"exploitabilityScore": null,
"id": "CVE-2015-0652",
"impactScore": null,
"integrityImpact": "None",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "High",
"trust": 0.8,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "COMPLETE",
"baseScore": 7.8,
"confidentialityImpact": "NONE",
"exploitabilityScore": 10.0,
"id": "VHN-78598",
"impactScore": 6.9,
"integrityImpact": "NONE",
"severity": "HIGH",
"trust": 0.1,
"vectorString": "AV:N/AC:L/AU:N/C:N/I:N/A:C",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "NVD",
"id": "CVE-2015-0652",
"trust": 1.8,
"value": "HIGH"
},
{
"author": "CNNVD",
"id": "CNNVD-201503-307",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "VULHUB",
"id": "VHN-78598",
"trust": 0.1,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-78598"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-001809"
},
{
"db": "NVD",
"id": "CVE-2015-0652"
},
{
"db": "CNNVD",
"id": "CNNVD-201503-307"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "The Session Description Protocol (SDP) implementation in Cisco TelePresence Video Communication Server (VCS) and Cisco Expressway before X8.2 and Cisco TelePresence Conductor before XC2.4 allows remote attackers to cause a denial of service (mishandled exception and device reload) via a crafted media description, aka Bug IDs CSCus96593 and CSCun73192. Multiple Cisco products are prone to a remote denial-of-service vulnerability. \nAn attacker can exploit this issue to reload an affected device, denying service to legitimate users. \nThis issue is being tracked by Cisco Bug ID CSCus96593 and CSCun73192",
"sources": [
{
"db": "NVD",
"id": "CVE-2015-0652"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-001809"
},
{
"db": "BID",
"id": "73047"
},
{
"db": "VULHUB",
"id": "VHN-78598"
}
],
"trust": 1.98
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2015-0652",
"trust": 2.8
},
{
"db": "SECTRACK",
"id": "1031910",
"trust": 1.1
},
{
"db": "JVNDB",
"id": "JVNDB-2015-001809",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-201503-307",
"trust": 0.7
},
{
"db": "BID",
"id": "73047",
"trust": 0.4
},
{
"db": "VULHUB",
"id": "VHN-78598",
"trust": 0.1
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-78598"
},
{
"db": "BID",
"id": "73047"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-001809"
},
{
"db": "NVD",
"id": "CVE-2015-0652"
},
{
"db": "CNNVD",
"id": "CNNVD-201503-307"
}
]
},
"id": "VAR-201503-0157",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VULHUB",
"id": "VHN-78598"
}
],
"trust": 0.01
},
"last_update_date": "2023-12-18T12:20:58.927000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "37541",
"trust": 0.8,
"url": "http://tools.cisco.com/security/center/viewambalert.x?alertid=37541"
},
{
"title": "cisco-sa-20150311-vcs",
"trust": 0.8,
"url": "http://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-20150311-vcs"
},
{
"title": "37728",
"trust": 0.8,
"url": "http://tools.cisco.com/security/center/viewalert.x?alertid=37728"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2015-001809"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-20",
"trust": 1.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-78598"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-001809"
},
{
"db": "NVD",
"id": "CVE-2015-0652"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.0,
"url": "http://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-20150311-vcs"
},
{
"trust": 1.1,
"url": "http://www.securitytracker.com/id/1031910"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-0652"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2015-0652"
},
{
"trust": 0.3,
"url": "http://www.cisco.com"
},
{
"trust": 0.3,
"url": "http://tools.cisco.com/security/center/viewalert.x?alertid=37728"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-78598"
},
{
"db": "BID",
"id": "73047"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-001809"
},
{
"db": "NVD",
"id": "CVE-2015-0652"
},
{
"db": "CNNVD",
"id": "CNNVD-201503-307"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "VULHUB",
"id": "VHN-78598"
},
{
"db": "BID",
"id": "73047"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-001809"
},
{
"db": "NVD",
"id": "CVE-2015-0652"
},
{
"db": "CNNVD",
"id": "CNNVD-201503-307"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2015-03-13T00:00:00",
"db": "VULHUB",
"id": "VHN-78598"
},
{
"date": "2015-03-11T00:00:00",
"db": "BID",
"id": "73047"
},
{
"date": "2015-03-16T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2015-001809"
},
{
"date": "2015-03-13T01:59:31.523000",
"db": "NVD",
"id": "CVE-2015-0652"
},
{
"date": "2015-03-16T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201503-307"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2015-09-11T00:00:00",
"db": "VULHUB",
"id": "VHN-78598"
},
{
"date": "2015-03-11T00:00:00",
"db": "BID",
"id": "73047"
},
{
"date": "2015-03-16T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2015-001809"
},
{
"date": "2015-09-11T15:45:22.507000",
"db": "NVD",
"id": "CVE-2015-0652"
},
{
"date": "2015-03-16T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201503-307"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201503-307"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "plural Cisco Product Session Description Protocol Denial of service in implementation (DoS) Vulnerability",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2015-001809"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "input validation",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201503-307"
}
],
"trust": 0.6
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.