CVE-2014-2160

UnknownEPSS 1.61%

Last modified

CVE-2014-2160 is a vulnerability of currently unknown severity. The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted packets, aka Bug ID CSCty45745.. EPSS estimates a 1.61% chance of exploitation in the next 30 days.

Description

The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted packets, aka Bug ID CSCty45745.

Metrics

EPSS Probability
1.61%

72.9th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
CiscoTelepresence System Software<= f9.3
CiscoTelepresence System Softwaref9.0.1
CiscoTelepresence System Softwaref9.0.2
CiscoTelepresence System Softwaref9.1.0
CiscoTelepresence System Softwaref9.1.1
CiscoTelepresence System Softwaref9.1.2
CiscoTelepresence System Softwarefnc9.1.0
CiscoTelepresence System Softwarefnc9.1.1
CiscoTelepresence System Softwarefnc9.1.2
CiscoTelepresence System Softwarefnc9.3
CiscoTandberg 2000 MxpAll versions
CiscoTandberg 550 MxpAll versions
CiscoTandberg 770 MxpAll versions
CiscoTandberg 880 MxpAll versions
CiscoTandberg 990 MxpAll versions
CiscoTelepresence System 1000 MxpAll versions
CiscoTelepresence System 1700 MxpAll versions
CiscoTelepresence System Codec 3000 MxpAll versions
CiscoTelepresence System Codec 6000 MxpAll versions
CiscoTelepresence System Edge 75 MxpAll versions
CiscoTelepresence System Edge 85 MxpAll versions
CiscoTelepresence System Edge 95 MxpAll versions

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2014-2160?
The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted packets, aka Bug ID CSCty45745.
How severe is CVE-2014-2160?
Severity scoring for CVE-2014-2160 is pending analysis. The EPSS model estimates a 1.61% probability of exploitation in the next 30 days.
How do I fix CVE-2014-2160?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2014-2160?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST