CVE-2013-3377: High severity Cisco TelePresence TC Software vulnerability
Published Jun 21, 2013
·Updated
Cisco TelePresence TC Software before 5.1.7 and TE Software before 4.1.3 allow remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCue01743.
Affected Software
25 affected components
Cisco TelePresence TC Software<=5.1.6
Cisco TelePresence TC Software=5.0.0
Cisco TelePresence TC Software=5.0.1
Cisco TelePresence TC Software=5.0.2
Cisco TelePresence TC Software=5.1.0
Cisco TelePresence TC Software=5.1.1
Cisco TelePresence TC Software=5.1.2
Cisco TelePresence TC Software=5.1.3
Cisco TelePresence TC Software=5.1.4
Cisco TelePresence TC Software=5.1.5
Cisco IP Video Phone E20
Cisco Telepresence Codec C40
Cisco Telepresence Codec C60
Cisco Telepresence Codec C90
Cisco Telepresence Ex60
Cisco Telepresence Ex90
Cisco Telepresence Mx200
Cisco Telepresence Mx300
Cisco Telepresence Profile 55
Cisco Telepresence Profile 65
Cisco Telepresence Quick Set C20
Cisco Telepresence Quick Set Sx20
Cisco Telepresence Te Software<=4.1.2
Cisco Telepresence Te Software=4.1.0
Cisco Telepresence Te Software=4.1.1
Event History
Jun 21, 2013
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-3377?
CVE-2013-3377 has a high severity level as it allows remote attackers to cause a denial of service by sending crafted SIP packets.
2
How do I fix CVE-2013-3377?
To fix CVE-2013-3377, upgrade your Cisco TelePresence TC Software to version 5.1.7 or later, or TE Software to version 4.1.3 or later.
3
Which Cisco products are affected by CVE-2013-3377?
CVE-2013-3377 affects various versions of Cisco TelePresence TC and TE Software, as well as several hardware devices using those software versions.
4
What type of vulnerability is CVE-2013-3377?
CVE-2013-3377 is classified as a denial of service vulnerability.
5
When was CVE-2013-3377 disclosed?
CVE-2013-3377 was disclosed on June 19, 2013.