What is the severity of CVE-2015-0652?

CVE-2015-0652 is rated as a high severity vulnerability due to its potential to cause a denial of service.

How do I fix CVE-2015-0652?

To fix CVE-2015-0652, upgrade affected Cisco products to the latest versions provided by Cisco.

Which software versions are affected by CVE-2015-0652?

The affected software versions for CVE-2015-0652 include Cisco Expressway before X8.2, Cisco TelePresence Video Communication Server before X8.1.1, and Cisco TelePresence Conductor before XC2.4.

What type of attacks does CVE-2015-0652 allow?

CVE-2015-0652 allows remote attackers to exploit the vulnerability to cause a denial of service by triggering mishandled exceptions that lead to device reload.

Is CVE-2015-0652 being actively exploited?

There is no public information indicating that CVE-2015-0652 is being actively exploited, but it is advised to apply patches to mitigate potential risks.

Vulnerability/
CVE-2015-0652

high

7.8

CWE

13/3/2015

11/9/2015

CVE-2015-0652: Input Validation

First published: Fri Mar 13 2015(Updated: )

The Session Description Protocol (SDP) implementation in Cisco TelePresence Video Communication Server (VCS) and Cisco Expressway before X8.2 and Cisco TelePresence Conductor before XC2.4 allows remote attackers to cause a denial of service (mishandled exception and device reload) via a crafted media description, aka Bug IDs CSCus96593 and CSCun73192.

Credit: ykramarz@cisco.com

Affected Software	Affected Version	How to fix
Cisco TelePresence VCS and Expressway Major	<=x8.1.1
Cisco TelePresence Conductor Firmware	<=xc2.4
Cisco TelePresence Video Communication Server	<=x8.1.1

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2015-0652?
CVE-2015-0652 is rated as a high severity vulnerability due to its potential to cause a denial of service.
How do I fix CVE-2015-0652?
To fix CVE-2015-0652, upgrade affected Cisco products to the latest versions provided by Cisco.
Which software versions are affected by CVE-2015-0652?
The affected software versions for CVE-2015-0652 include Cisco Expressway before X8.2, Cisco TelePresence Video Communication Server before X8.1.1, and Cisco TelePresence Conductor before XC2.4.
What type of attacks does CVE-2015-0652 allow?
CVE-2015-0652 allows remote attackers to exploit the vulnerability to cause a denial of service by triggering mishandled exceptions that lead to device reload.
Is CVE-2015-0652 being actively exploited?
There is no public information indicating that CVE-2015-0652 is being actively exploited, but it is advised to apply patches to mitigate potential risks.

agent/references
agent/type
agent/last-modified-date
agent/first-publish-date
agent/severity
agent/weakness
agent/author
agent/description
agent/tags
agent/softwarecombine
agent/event
collector/nvd-index
agent/software-canonical-lookup-request
vendor/cisco
canonical/cisco telepresence vcs and expressway major
version/cisco telepresence vcs and expressway major/x8.1.1
canonical/cisco telepresence conductor firmware
version/cisco telepresence conductor firmware/xc2.4
canonical/cisco telepresence video communication server
version/cisco telepresence video communication server/x8.1.1

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.