Buffer overflow in Cisco Telepresence Server 7010
CVE-2015-6284
Buffer overflow in the Conference Control Protocol API implementation in Cisco TelePresence Server software before 4.1(2.33) on 7010, MSE 8710, Multiparty Media 310 and 320, and Virtual Machine devices allows remote attackers to cause a denial of service (device crash) via a crafted URL, aka Bug ID CSCuu28277.
Vulnerability class: Buffer Overflow
EPSS: 0.024 (82.6th percentile) — read the EPSS interpretation.
Affected products
- Cisco Telepresence_server_7010
- Cisco Telepresence_server_mse_8710
- Cisco Telepresence_server_on_multiparty_media_310
- Cisco Telepresence_server_on_multiparty_media_320
- Cisco Telepresence_server_on_virtual_machine
- Cisco Telepresence_server_software — versions 3.1(1.80), 4.0(1.57), 3.1(1.95)
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)