7.8

CVE-2014-2159

The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted packets, aka Bug ID CSCtq78722.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Telepresence System Software Version <= f9.3
Cisco ≫ Telepresence System Software Versionfnc9.1.0
Cisco ≫ Telepresence System Software Versionfnc9.1.1
Cisco ≫ Telepresence System Software Versionfnc9.1.2
Cisco ≫ Tandberg 2000 Mxp Version-
Cisco ≫ Tandberg 550 Mxp Version-
Cisco ≫ Tandberg 770 Mxp Version-
Cisco ≫ Tandberg 880 Mxp Version-
Cisco ≫ Tandberg 990 Mxp Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.22% 0.414
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.8 10 6.9
AV:N/AC:L/Au:N/C:N/I:N/A:C
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.