CVE-2014-2158: Input Validation
Published May 2, 2014
·Updated
Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCty45720.
Affected Software
44 affected components
Cisco TelePresence System Software<=f9.3
Cisco TelePresence System Software=f9.0.1
Cisco TelePresence System Software=f9.0.2
Cisco TelePresence System Software=f9.1.0
Cisco TelePresence System Software=f9.1.1
Cisco TelePresence System Software=f9.1.2
Cisco TelePresence System Software=fnc9.1.0
Cisco TelePresence System Software=fnc9.1.1
Cisco TelePresence System Software=fnc9.1.2
Cisco TelePresence System Software=fnc9.3
Cisco Tandberg 2000 Mxp
Cisco Tandberg 550 Mxp
Cisco Tandberg 770 Mxp
Cisco Tandberg 880 Mxp
Cisco Tandberg 990 Mxp
Cisco Telepresence System 1000 Mxp
Cisco Telepresence System 1700 Mxp
Cisco Telepresence System Codec 3000 Mxp
Cisco Telepresence System Codec 6000 Mxp
Cisco Telepresence System Edge 75 Mxp
Cisco Telepresence System Edge 85 Mxp
Cisco Telepresence System Edge 95 Mxp
All of the following
Any of the following
Cisco TelePresence System Software<=f9.3
Cisco TelePresence System Software=f9.0.1
Cisco TelePresence System Software=f9.0.2
Cisco TelePresence System Software=f9.1.0
Cisco TelePresence System Software=f9.1.1
Cisco TelePresence System Software=f9.1.2
Cisco TelePresence System Software=fnc9.1.0
Cisco TelePresence System Software=fnc9.1.1
Cisco TelePresence System Software=fnc9.1.2
Cisco TelePresence System Software=fnc9.3
Any of the following
Cisco Tandberg 2000 Mxp
Cisco Tandberg 550 Mxp
Cisco Tandberg 770 Mxp
Cisco Tandberg 880 Mxp
Cisco Tandberg 990 Mxp
Cisco Telepresence System 1000 Mxp
Cisco Telepresence System 1700 Mxp
Cisco Telepresence System Codec 3000 Mxp
Cisco Telepresence System Codec 6000 Mxp
Cisco Telepresence System Edge 75 Mxp
Cisco Telepresence System Edge 85 Mxp
Cisco Telepresence System Edge 95 Mxp
Event History
May 2, 2014
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Data Sourced
via NVD·10:55 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-2158?
CVE-2014-2158 has a severity score indicating the vulnerability can lead to a denial of service that affects device availability.
2
How do I fix CVE-2014-2158?
To fix CVE-2014-2158, upgrade the Cisco TelePresence System software to version F9.3.1 or later.
3
Which versions are affected by CVE-2014-2158?
CVE-2014-2158 affects Cisco TelePresence System MXP Series Software versions prior to F9.3.1.
4
What type of attack can exploit CVE-2014-2158?
CVE-2014-2158 can be exploited by remote attackers sending crafted SIP packets.
5
What is the impact of CVE-2014-2158?
The impact of CVE-2014-2158 is a denial of service that causes a device reload, affecting system functionality.