« Volver al listado

CVE-2014-2156

Estado: ModificadaAlta (7.1)—

Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCty45739.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (13)

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2014-2156",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.1,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:C",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 6.9,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@cisco.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-05-02T10:55:07.977",
  "references": [
    {
      "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140430-mxp",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140430-mxp",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCty45739."
    },
    {
      "lang": "es",
      "value": "Cisco TelePresence System Serie MXP Software anterior a F9.3.1 permite a atacantes remotos causar una denegación de servicio (reinicio de dispositivo) a través de paquetes SIP manipulados, también conocido como Bug ID CSCty45739."
    }
  ],
  "lastModified": "2026-06-17T00:06:09.127",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:telepresence_system_software:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5A29C747-0993-48EB-BDA4-0340D84DCFB2",
              "versionEndIncluding": "f9.3"
            },
            {
              "criteria": "cpe:2.3:a:cisco:telepresence_system_software:f9.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FA5AE2ED-DFA1-4006-9AF2-0DAFE04CA137"
            },
            {
              "criteria": "cpe:2.3:a:cisco:telepresence_system_software:f9.0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "22EF5B04-FF47-4421-9079-3A12ECED6CF4"
            },
            {
              "criteria": "cpe:2.3:a:cisco:telepresence_system_software:f9.1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AB1740ED-2FD7-4DD3-A338-ED92B4646FF9"
            },
            {
              "criteria": "cpe:2.3:a:cisco:telepresence_system_software:f9.1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "07AE79EB-E782-40E3-BB0C-95BD3EDB999E"
            },
            {
              "criteria": "cpe:2.3:a:cisco:telepresence_system_software:f9.1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F5CEEFB3-43FA-496E-BD4C-9A038DF7A83D"
            },
            {
              "criteria": "cpe:2.3:a:cisco:telepresence_system_software:fnc9.1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2DBE62D4-23AE-458F-B432-520BD67E1F47"
            },
            {
              "criteria": "cpe:2.3:a:cisco:telepresence_system_software:fnc9.1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "93945E40-6D00-4D82-BBA2-2D36D3917CE5"
            },
            {
              "criteria": "cpe:2.3:a:cisco:telepresence_system_software:fnc9.1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F889108D-F2A6-4B72-957D-D6523E4462FB"
            },
            {
              "criteria": "cpe:2.3:a:cisco:telepresence_system_software:fnc9.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3ADE6544-172E-42A2-8EEE-0BEB226AEAE8"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:cisco:tandberg_2000_mxp:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7588AA7A-8D34-499D-A6F1-7A20A99E1A0A"
            },
            {
              "criteria": "cpe:2.3:h:cisco:tandberg_550_mxp:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B089B3DA-D7D5-4854-9752-0D2D71451BC3"
            },
            {
              "criteria": "cpe:2.3:h:cisco:tandberg_770_mxp:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "71D9434C-AF5D-409D-9916-AA33E7150AFB"
            },
            {
              "criteria": "cpe:2.3:h:cisco:tandberg_880_mxp:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C593FA3F-2E60-4DA6-B344-ABFC0A9306B8"
            },
            {
              "criteria": "cpe:2.3:h:cisco:tandberg_990_mxp:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1801A743-50BD-4EA6-870D-F7823D4360AF"
            },
            {
              "criteria": "cpe:2.3:h:cisco:telepresence_system_1000_mxp:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "15C7580D-A36B-42EB-B2B7-D8867085B1ED"
            },
            {
              "criteria": "cpe:2.3:h:cisco:telepresence_system_1700_mxp:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "56C6AA92-44CC-4B5E-A2AD-BC1344052D87"
            },
            {
              "criteria": "cpe:2.3:h:cisco:telepresence_system_codec_3000_mxp:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A36F9689-016D-432D-9689-03CC9BFAAD72"
            },
            {
              "criteria": "cpe:2.3:h:cisco:telepresence_system_codec_6000_mxp:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A45BED17-ED6A-4033-9E8A-9DB6017ED3B5"
            },
            {
              "criteria": "cpe:2.3:h:cisco:telepresence_system_edge_75_mxp:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D8EF08E9-43DC-48ED-AA51-9AB2F36C49CB"
            },
            {
              "criteria": "cpe:2.3:h:cisco:telepresence_system_edge_85_mxp:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "38C4B3F1-F6E8-4E69-93EC-14A5ED18DD5F"
            },
            {
              "criteria": "cpe:2.3:h:cisco:telepresence_system_edge_95_mxp:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F417CBA6-C471-436E-B9C0-C601AAC895DA"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "evaluatorImpact": "Per: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140430-mxp\n\n\" Vulnerable Products\nThe following products running a version of Cisco TelePresence System MXP Series Software prior to F9.3.1 are affected by the vulnerabilities described in this advisory:\n\n    Cisco TelePresence System 1700 MXP\n    Cisco TelePresence System 1000 MXP\n    Cisco TelePresence System Edge 75 MXP\n    Cisco TelePresence System Edge 85 MXP\n    Cisco TelePresence System Edge 95 MXP\n    Cisco TelePresence System Codec 3000 MXP\n    Cisco TelePresence System Codec 6000 MXP\n    Tandberg 550 MXP\n    Tandberg 770 MXP\n    Tandberg 880 MXP\n    Tandberg 990 MXP\n    Tandberg 2000 MXP\"\n",
  "sourceIdentifier": "psirt@cisco.com"
}