CVE-2014-2157

Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCty45733.

CVSS v2.0 7.1 HIGH

7.1^/10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:M/Au:N/C:N/I:N/A:C

Exploitability : 8.6 / Impact : 6.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

References

Link	Resource
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140430-mxp	Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140430-mxp	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:a:cisco:telepresence_system_software::::::::
	cpe:2.3:a:cisco:telepresence_system_software:f9.0.1:::::::*
	cpe:2.3:a:cisco:telepresence_system_software:f9.0.2:::::::*
	cpe:2.3:a:cisco:telepresence_system_software:f9.1.0:::::::*
	cpe:2.3:a:cisco:telepresence_system_software:f9.1.1:::::::*
	cpe:2.3:a:cisco:telepresence_system_software:f9.1.2:::::::*
	cpe:2.3:a:cisco:telepresence_system_software:fnc9.1.0:::::::*
	cpe:2.3:a:cisco:telepresence_system_software:fnc9.1.1:::::::*
	cpe:2.3:a:cisco:telepresence_system_software:fnc9.1.2:::::::*
	cpe:2.3:a:cisco:telepresence_system_software:fnc9.3:::::::*

OR	cpe:2.3:h:cisco:tandberg_2000_mxp:-:::::::*
	cpe:2.3:h:cisco:tandberg_550_mxp:-:::::::*
	cpe:2.3:h:cisco:tandberg_770_mxp:-:::::::*
	cpe:2.3:h:cisco:tandberg_880_mxp:-:::::::*
	cpe:2.3:h:cisco:tandberg_990_mxp:-:::::::*
	cpe:2.3:h:cisco:telepresence_system_1000_mxp:-:::::::*
	cpe:2.3:h:cisco:telepresence_system_1700_mxp:-:::::::*
	cpe:2.3:h:cisco:telepresence_system_codec_3000_mxp:-:::::::*
	cpe:2.3:h:cisco:telepresence_system_codec_6000_mxp:-:::::::*
	cpe:2.3:h:cisco:telepresence_system_edge_75_mxp:-:::::::*
	cpe:2.3:h:cisco:telepresence_system_edge_85_mxp:-:::::::*
	cpe:2.3:h:cisco:telepresence_system_edge_95_mxp:-:::::::*

History

21 Nov 2024, 02:05

Type	Values Removed	Values Added
References	~~() http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140430-mxp - Vendor Advisory~~	() http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140430-mxp - Vendor Advisory

Information

Published : 2014-05-02 10:55

Updated : 2025-04-12 10:46

NVD link : CVE-2014-2157

Mitre link : CVE-2014-2157

CVE.ORG link : CVE-2014-2157

JSON object : View

Products Affected

cisco

tandberg_550_mxp
telepresence_system_edge_75_mxp
telepresence_system_edge_95_mxp
tandberg_880_mxp
tandberg_2000_mxp
telepresence_system_1700_mxp
telepresence_system_codec_6000_mxp
telepresence_system_edge_85_mxp
telepresence_system_codec_3000_mxp
tandberg_770_mxp
telepresence_system_software
tandberg_990_mxp
telepresence_system_1000_mxp

CWE

CWE-20

Improper Input Validation

{"id": "CVE-2014-2157", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.1, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:C", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 6.9, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2014-05-02T10:55:08.007", "references": [{"url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140430-mxp", "tags": ["Vendor Advisory"], "source": "psirt@cisco.com"}, {"url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140430-mxp", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCty45733."}, {"lang": "es", "value": "Cisco TelePresence System Serie MXP Software anterior a F9.3.1 permite a atacantes remotos causar una denegaci\u00f3n de servicio (reinicio de dispositivo) a trav\u00e9s de paquetes SIP manipulados, tambi\u00e9n conocido como Bug ID CSCty45733."}], "lastModified": "2025-04-12T10:46:40.837", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cisco:telepresence_system_software:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5A29C747-0993-48EB-BDA4-0340D84DCFB2", "versionEndIncluding": "f9.3"}, {"criteria": "cpe:2.3:a:cisco:telepresence_system_software:f9.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FA5AE2ED-DFA1-4006-9AF2-0DAFE04CA137"}, {"criteria": "cpe:2.3:a:cisco:telepresence_system_software:f9.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "22EF5B04-FF47-4421-9079-3A12ECED6CF4"}, {"criteria": "cpe:2.3:a:cisco:telepresence_system_software:f9.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AB1740ED-2FD7-4DD3-A338-ED92B4646FF9"}, {"criteria": "cpe:2.3:a:cisco:telepresence_system_software:f9.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "07AE79EB-E782-40E3-BB0C-95BD3EDB999E"}, {"criteria": "cpe:2.3:a:cisco:telepresence_system_software:f9.1.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F5CEEFB3-43FA-496E-BD4C-9A038DF7A83D"}, {"criteria": "cpe:2.3:a:cisco:telepresence_system_software:fnc9.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2DBE62D4-23AE-458F-B432-520BD67E1F47"}, {"criteria": "cpe:2.3:a:cisco:telepresence_system_software:fnc9.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "93945E40-6D00-4D82-BBA2-2D36D3917CE5"}, {"criteria": "cpe:2.3:a:cisco:telepresence_system_software:fnc9.1.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F889108D-F2A6-4B72-957D-D6523E4462FB"}, {"criteria": "cpe:2.3:a:cisco:telepresence_system_software:fnc9.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3ADE6544-172E-42A2-8EEE-0BEB226AEAE8"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:cisco:tandberg_2000_mxp:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7588AA7A-8D34-499D-A6F1-7A20A99E1A0A"}, {"criteria": "cpe:2.3:h:cisco:tandberg_550_mxp:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B089B3DA-D7D5-4854-9752-0D2D71451BC3"}, {"criteria": "cpe:2.3:h:cisco:tandberg_770_mxp:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "71D9434C-AF5D-409D-9916-AA33E7150AFB"}, {"criteria": "cpe:2.3:h:cisco:tandberg_880_mxp:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C593FA3F-2E60-4DA6-B344-ABFC0A9306B8"}, {"criteria": "cpe:2.3:h:cisco:tandberg_990_mxp:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1801A743-50BD-4EA6-870D-F7823D4360AF"}, {"criteria": "cpe:2.3:h:cisco:telepresence_system_1000_mxp:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "15C7580D-A36B-42EB-B2B7-D8867085B1ED"}, {"criteria": "cpe:2.3:h:cisco:telepresence_system_1700_mxp:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "56C6AA92-44CC-4B5E-A2AD-BC1344052D87"}, {"criteria": "cpe:2.3:h:cisco:telepresence_system_codec_3000_mxp:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A36F9689-016D-432D-9689-03CC9BFAAD72"}, {"criteria": "cpe:2.3:h:cisco:telepresence_system_codec_6000_mxp:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A45BED17-ED6A-4033-9E8A-9DB6017ED3B5"}, {"criteria": "cpe:2.3:h:cisco:telepresence_system_edge_75_mxp:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D8EF08E9-43DC-48ED-AA51-9AB2F36C49CB"}, {"criteria": "cpe:2.3:h:cisco:telepresence_system_edge_85_mxp:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "38C4B3F1-F6E8-4E69-93EC-14A5ED18DD5F"}, {"criteria": "cpe:2.3:h:cisco:telepresence_system_edge_95_mxp:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F417CBA6-C471-436E-B9C0-C601AAC895DA"}], "operator": "OR"}], "operator": "AND"}], "evaluatorImpact": "Per: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140430-mxp\n\n\" Vulnerable Products\nThe following products running a version of Cisco TelePresence System MXP Series Software prior to F9.3.1 are affected by the vulnerabilities described in this advisory:\n\n Cisco TelePresence System 1700 MXP\n Cisco TelePresence System 1000 MXP\n Cisco TelePresence System Edge 75 MXP\n Cisco TelePresence System Edge 85 MXP\n Cisco TelePresence System Edge 95 MXP\n Cisco TelePresence System Codec 3000 MXP\n Cisco TelePresence System Codec 6000 MXP\n Tandberg 550 MXP\n Tandberg 770 MXP\n Tandberg 880 MXP\n Tandberg 990 MXP\n Tandberg 2000 MXP\"", "sourceIdentifier": "psirt@cisco.com"}

7.1 /10