CVE-2014-2161: Input Validation
Published May 2, 2014
·Updated
The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted packets, aka Bug ID CSCty45731.
Affected Software
44 affected components
Cisco TelePresence System Software<=f9.3
Cisco TelePresence System Software=f9.0.1
Cisco TelePresence System Software=f9.0.2
Cisco TelePresence System Software=f9.1.0
Cisco TelePresence System Software=f9.1.1
Cisco TelePresence System Software=f9.1.2
Cisco TelePresence System Software=fnc9.1.0
Cisco TelePresence System Software=fnc9.1.1
Cisco TelePresence System Software=fnc9.1.2
Cisco TelePresence System Software=fnc9.3
Cisco Tandberg 2000 Mxp
Cisco Tandberg 550 Mxp
Cisco Tandberg 770 Mxp
Cisco Tandberg 880 Mxp
Cisco Tandberg 990 Mxp
Cisco Telepresence System 1000 Mxp
Cisco Telepresence System 1700 Mxp
Cisco Telepresence System Codec 3000 Mxp
Cisco Telepresence System Codec 6000 Mxp
Cisco Telepresence System Edge 75 Mxp
Cisco Telepresence System Edge 85 Mxp
Cisco Telepresence System Edge 95 Mxp
All of the following
Any of the following
Cisco TelePresence System Software<=f9.3
Cisco TelePresence System Software=f9.0.1
Cisco TelePresence System Software=f9.0.2
Cisco TelePresence System Software=f9.1.0
Cisco TelePresence System Software=f9.1.1
Cisco TelePresence System Software=f9.1.2
Cisco TelePresence System Software=fnc9.1.0
Cisco TelePresence System Software=fnc9.1.1
Cisco TelePresence System Software=fnc9.1.2
Cisco TelePresence System Software=fnc9.3
Any of the following
Cisco Tandberg 2000 Mxp
Cisco Tandberg 550 Mxp
Cisco Tandberg 770 Mxp
Cisco Tandberg 880 Mxp
Cisco Tandberg 990 Mxp
Cisco Telepresence System 1000 Mxp
Cisco Telepresence System 1700 Mxp
Cisco Telepresence System Codec 3000 Mxp
Cisco Telepresence System Codec 6000 Mxp
Cisco Telepresence System Edge 75 Mxp
Cisco Telepresence System Edge 85 Mxp
Cisco Telepresence System Edge 95 Mxp
Event History
May 2, 2014
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Data Sourced
via NVD·10:55 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-2161?
CVE-2014-2161 is rated as a denial of service vulnerability with medium severity.
2
How do I fix CVE-2014-2161?
To fix CVE-2014-2161, update the Cisco TelePresence System MXP Series Software to version F9.3.1 or later.
3
What systems are affected by CVE-2014-2161?
CVE-2014-2161 affects multiple versions of Cisco TelePresence System Software prior to F9.3.1.
4
What type of attack is CVE-2014-2161 associated with?
CVE-2014-2161 is associated with remote attacks that can cause device reloads.
5
Are there any workarounds for CVE-2014-2161?
Currently, Cisco recommends applying the software update as the primary method to mitigate CVE-2014-2161.