CVE-2014-2163: Input Validation
Published May 2, 2014
·Updated
The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCua64961.
Affected Software
25 affected components
Cisco TelePresence TC Software=4.0.0
Cisco TelePresence TC Software=4.0.1
Cisco TelePresence TC Software=4.0.4
Cisco TelePresence TC Software=4.1.1
Cisco TelePresence TC Software=4.1.2
Cisco TelePresence TC Software=4.2.0
Cisco TelePresence TC Software=4.2.1
Cisco TelePresence TC Software=4.2.2
Cisco TelePresence TC Software=4.2.3
Cisco TelePresence TC Software=4.2.4
Cisco TelePresence TC Software=5.0.0
Cisco TelePresence TC Software=5.0.1
Cisco TelePresence TC Software=5.0.2
Cisco TelePresence TC Software=5.1.0
Cisco TelePresence TC Software=5.1.1
Cisco TelePresence TC Software=5.1.2
Cisco TelePresence TC Software=5.1.3
Cisco TelePresence TC Software=5.1.4
Cisco TelePresence TC Software=5.1.5
Cisco TelePresence TC Software=5.1.6
Cisco TelePresence TC Software=5.1.7
Cisco Telepresence Te Software=4.1.0
Cisco Telepresence Te Software=4.1.1
Cisco Telepresence Te Software=4.1.2
Cisco Telepresence Te Software=4.1.3
Event History
May 2, 2014
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Data Sourced
via NVD·10:55 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-2163?
CVE-2014-2163 has been classified as a denial of service vulnerability.
2
How do I fix CVE-2014-2163?
To resolve CVE-2014-2163, update the affected Cisco TelePresence software to the latest version provided by Cisco.
3
What does CVE-2014-2163 affect?
CVE-2014-2163 affects Cisco TelePresence TC Software versions 4.x and 5.x, as well as TE Software 4.x.
4
Can CVE-2014-2163 be exploited remotely?
Yes, CVE-2014-2163 can be exploited by remote attackers via crafted SIP packets.
5
What kind of impact does CVE-2014-2163 have?
The impact of CVE-2014-2163 includes the potential for a device reload, leading to a denial of service.