CVE-2015-0772 - Cisco TelePresence Video Communication Server (VCS) X8.5RC4 allows remote attackers to cause a denial of service (CPU consumption or device outage) via a crafted SDP parameter-negotiation request in an SDP session during a SIP connection, aka Bug ID CSCut42422

Back Back to CVE browser

HIGH

Cisco TelePresence Video Communication Server (VCS) X8.5RC4 allows remote attackers to cause a denial of service (CPU consumption or device outage) via a crafted SDP parameter-negotiation request in an SDP session during a SIP connection, aka Bug ID CSCut42422

Published Jun 12, 2015

7.1

HIGH

CVSS 2.0

EPSS 1.86%

Description

Cisco TelePresence Video Communication Server (VCS) X8.5RC4 allows remote attackers to cause a denial of service (CPU consumption or device outage) via a crafted SDP parameter-negotiation request in an SDP session during a SIP connection, aka Bug ID CSCut42422.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-399

References (2)

http://tools.cisco.com/security/center/viewAlert.x?alertId=39240
vendor-advisoryx_refsource_CISCOVendor Advisory
http://www.securitytracker.com/id/1032540
vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry

Link	Providers	Tags
http://tools.cisco.com/security/center/viewAlert.x?alertId=39240		vendor-advisoryx_refsource_CISCOVendor Advisory
http://www.securitytracker.com/id/1032540		vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner cisco

Published Jun 12, 2015

Updated Aug 6, 2024

Reserved Jan 7, 2015

Link CVE-2015-0772

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2015-0772

Red Hat

Severity n/a

Public date n/a

Links CVE-2015-0772