CVE-2014-2157

{"id": "CVE-2014-2157", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.1, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:C", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 6.9, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2014-05-02T10:55:08.007", "references": [{"url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140430-mxp", "tags": ["Vendor Advisory"], "source": "ykramarz@cisco.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCty45733."}, {"lang": "es", "value": "Cisco TelePresence System Serie MXP Software anterior a F9.3.1 permite a atacantes remotos causar una denegaci\u00f3n de servicio (reinicio de dispositivo) a trav\u00e9s de paquetes SIP manipulados, tambi\u00e9n conocido como Bug ID CSCty45733."}], "lastModified": "2014-05-02T16:03:27.213", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cisco:telepresence_system_software:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5A29C747-0993-48EB-BDA4-0340D84DCFB2", "versionEndIncluding": "f9.3"}, {"criteria": "cpe:2.3:a:cisco:telepresence_system_software:f9.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FA5AE2ED-DFA1-4006-9AF2-0DAFE04CA137"}, {"criteria": "cpe:2.3:a:cisco:telepresence_system_software:f9.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "22EF5B04-FF47-4421-9079-3A12ECED6CF4"}, {"criteria": "cpe:2.3:a:cisco:telepresence_system_software:f9.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AB1740ED-2FD7-4DD3-A338-ED92B4646FF9"}, {"criteria": "cpe:2.3:a:cisco:telepresence_system_software:f9.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "07AE79EB-E782-40E3-BB0C-95BD3EDB999E"}, {"criteria": "cpe:2.3:a:cisco:telepresence_system_software:f9.1.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F5CEEFB3-43FA-496E-BD4C-9A038DF7A83D"}, {"criteria": "cpe:2.3:a:cisco:telepresence_system_software:fnc9.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2DBE62D4-23AE-458F-B432-520BD67E1F47"}, {"criteria": "cpe:2.3:a:cisco:telepresence_system_software:fnc9.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "93945E40-6D00-4D82-BBA2-2D36D3917CE5"}, {"criteria": "cpe:2.3:a:cisco:telepresence_system_software:fnc9.1.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F889108D-F2A6-4B72-957D-D6523E4462FB"}, {"criteria": "cpe:2.3:a:cisco:telepresence_system_software:fnc9.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3ADE6544-172E-42A2-8EEE-0BEB226AEAE8"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:cisco:tandberg_2000_mxp:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7588AA7A-8D34-499D-A6F1-7A20A99E1A0A"}, {"criteria": "cpe:2.3:h:cisco:tandberg_550_mxp:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B089B3DA-D7D5-4854-9752-0D2D71451BC3"}, {"criteria": "cpe:2.3:h:cisco:tandberg_770_mxp:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "71D9434C-AF5D-409D-9916-AA33E7150AFB"}, {"criteria": "cpe:2.3:h:cisco:tandberg_880_mxp:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C593FA3F-2E60-4DA6-B344-ABFC0A9306B8"}, {"criteria": "cpe:2.3:h:cisco:tandberg_990_mxp:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1801A743-50BD-4EA6-870D-F7823D4360AF"}, {"criteria": "cpe:2.3:h:cisco:telepresence_system_1000_mxp:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "15C7580D-A36B-42EB-B2B7-D8867085B1ED"}, {"criteria": "cpe:2.3:h:cisco:telepresence_system_1700_mxp:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "56C6AA92-44CC-4B5E-A2AD-BC1344052D87"}, {"criteria": "cpe:2.3:h:cisco:telepresence_system_codec_3000_mxp:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A36F9689-016D-432D-9689-03CC9BFAAD72"}, {"criteria": "cpe:2.3:h:cisco:telepresence_system_codec_6000_mxp:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A45BED17-ED6A-4033-9E8A-9DB6017ED3B5"}, {"criteria": "cpe:2.3:h:cisco:telepresence_system_edge_75_mxp:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D8EF08E9-43DC-48ED-AA51-9AB2F36C49CB"}, {"criteria": "cpe:2.3:h:cisco:telepresence_system_edge_85_mxp:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "38C4B3F1-F6E8-4E69-93EC-14A5ED18DD5F"}, {"criteria": "cpe:2.3:h:cisco:telepresence_system_edge_95_mxp:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F417CBA6-C471-436E-B9C0-C601AAC895DA"}], "operator": "OR"}], "operator": "AND"}], "evaluatorImpact": "Per: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140430-mxp\n\n\" Vulnerable Products\nThe following products running a version of Cisco TelePresence System MXP Series Software prior to F9.3.1 are affected by the vulnerabilities described in this advisory:\n\n Cisco TelePresence System 1700 MXP\n Cisco TelePresence System 1000 MXP\n Cisco TelePresence System Edge 75 MXP\n Cisco TelePresence System Edge 85 MXP\n Cisco TelePresence System Edge 95 MXP\n Cisco TelePresence System Codec 3000 MXP\n Cisco TelePresence System Codec 6000 MXP\n Tandberg 550 MXP\n Tandberg 770 MXP\n Tandberg 880 MXP\n Tandberg 990 MXP\n Tandberg 2000 MXP\"", "sourceIdentifier": "ykramarz@cisco.com"}