CVE-2014-2161

UnknownEPSS 1.61%

Last modified

CVE-2014-2161 is a vulnerability of currently unknown severity. The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted packets, aka Bug ID CSCty45731.. EPSS estimates a 1.61% chance of exploitation in the next 30 days.

Description

The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted packets, aka Bug ID CSCty45731.

Metrics

EPSS Probability
1.61%

72.9th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
CiscoTelepresence System Software<= f9.3
CiscoTelepresence System Softwaref9.0.1
CiscoTelepresence System Softwaref9.0.2
CiscoTelepresence System Softwaref9.1.0
CiscoTelepresence System Softwaref9.1.1
CiscoTelepresence System Softwaref9.1.2
CiscoTelepresence System Softwarefnc9.1.0
CiscoTelepresence System Softwarefnc9.1.1
CiscoTelepresence System Softwarefnc9.1.2
CiscoTelepresence System Softwarefnc9.3
CiscoTandberg 2000 MxpAll versions
CiscoTandberg 550 MxpAll versions
CiscoTandberg 770 MxpAll versions
CiscoTandberg 880 MxpAll versions
CiscoTandberg 990 MxpAll versions
CiscoTelepresence System 1000 MxpAll versions
CiscoTelepresence System 1700 MxpAll versions
CiscoTelepresence System Codec 3000 MxpAll versions
CiscoTelepresence System Codec 6000 MxpAll versions
CiscoTelepresence System Edge 75 MxpAll versions
CiscoTelepresence System Edge 85 MxpAll versions
CiscoTelepresence System Edge 95 MxpAll versions

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2014-2161?
The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted packets, aka Bug ID CSCty45731.
How severe is CVE-2014-2161?
Severity scoring for CVE-2014-2161 is pending analysis. The EPSS model estimates a 1.61% probability of exploitation in the next 30 days.
How do I fix CVE-2014-2161?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2014-2161?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST