« Volver al listado

CVE-2014-0662

Estado: ModificadaAlta (7.1)—

The SIP module in Cisco TelePresence Video Communication Server (VCS) before 8.1 allows remote attackers to cause a denial of service (process failure) via a crafted SDP message, aka Bug ID CSCue97632.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Cisco — Telepresence Video Communication Server SoftwareCisco — Telepresence Video Communication Servers Software

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2014-0662",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.1,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:C",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 6.9,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@cisco.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-01-22T21:55:03.573",
  "references": [
    {
      "url": "http://osvdb.org/102363",
      "tags": [
        "Broken Link"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://secunia.com/advisories/56592",
      "tags": [
        "Permissions Required"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140122-vcs",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=32409",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/65076",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.securitytracker.com/id/1029655",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/90621",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://osvdb.org/102363",
      "tags": [
        "Broken Link"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/56592",
      "tags": [
        "Permissions Required"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140122-vcs",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=32409",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/65076",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id/1029655",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/90621",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The SIP module in Cisco TelePresence Video Communication Server (VCS) before 8.1 allows remote attackers to cause a denial of service (process failure) via a crafted SDP message, aka Bug ID CSCue97632."
    },
    {
      "lang": "es",
      "value": "El módulo SIP en Cisco TelePresence Video Communication Server (VCS) anterior a la versión 8.1 permite a atacantes remotos provocar una denegación de servicio (fallo del proceso) a través de un mensaje SDP manipulado, también conocido como Bug ID CSCue97632."
    }
  ],
  "lastModified": "2026-06-17T00:03:27.337",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:telepresence_video_communication_server_software:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D0DDC3D5-01A0-4F71-B755-B98973D68739",
              "versionEndIncluding": "x7.2.2"
            },
            {
              "criteria": "cpe:2.3:a:cisco:telepresence_video_communication_server_software:x6.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "70787ED4-06AC-4919-B5E8-56EF31E0C05F"
            },
            {
              "criteria": "cpe:2.3:a:cisco:telepresence_video_communication_server_software:x6.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1037CA0E-B1E7-4429-A49A-670B5B761CD2"
            },
            {
              "criteria": "cpe:2.3:a:cisco:telepresence_video_communication_server_software:x7.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "53EB29E5-6F45-4B45-9F73-A9A25494DD37"
            },
            {
              "criteria": "cpe:2.3:a:cisco:telepresence_video_communication_server_software:x7.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7F412860-8FDF-426A-9FDD-F983CF001A72"
            },
            {
              "criteria": "cpe:2.3:a:cisco:telepresence_video_communication_server_software:x7.2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A3862B9E-E5A1-41EA-8527-325B3FE9A9EB"
            },
            {
              "criteria": "cpe:2.3:a:cisco:telepresence_video_communication_servers_software:x7.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ED32DE85-6CBC-448F-8808-95A70A8928A9"
            },
            {
              "criteria": "cpe:2.3:a:cisco:telepresence_video_communication_servers_software:x7.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A306A630-97D0-400C-BD78-0C8A30DDF2DF"
            },
            {
              "criteria": "cpe:2.3:a:cisco:telepresence_video_communication_servers_software:x7.0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "07020BD0-7F5A-416B-BF66-CA2EBD48053A"
            },
            {
              "criteria": "cpe:2.3:a:cisco:telepresence_video_communication_servers_software:x7.0.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3BC4484F-9802-471B-A142-A6E5C81986AE"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@cisco.com"
}