Cisco TelePresence Video Communication Server (VCS) Expressway Variant

CPE Details

Cisco TelePresence Video Communication Server (VCS) Expressway Variant
cisco
telepresence_video_communication_server
-
2012-03-01
16h49 +00:00
2012-03-07
22h01 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:h:cisco:telepresence_video_communication_server:-:*:expressway:*:*:*:*:*

Informations

Vendor

cisco

Product

telepresence_video_communication_server

Version

-

edition

expressway

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2018-5390 2018-08-06 18h00 +00:00 Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service.
7.5
High
CVE-2016-1400 2016-05-24 23h00 +00:00 Cisco TelePresence Video Communications Server (VCS) X8.x before X8.7.2 allows remote attackers to cause a denial of service (service disruption) via a crafted URI in a SIP header, aka Bug ID CSCuy43258.
7.5
High
CVE-2014-0675 2014-01-23 01h00 +00:00 The Expressway component in Cisco TelePresence Video Communication Server (VCS) uses the same default X.509 certificate across different customers' installations, which makes it easier for remote attackers to conduct man-in-the-middle attacks against SSL sessions by leveraging the certificate's trust relationship, aka Bug ID CSCue07471.
6.4
CVE-2012-5444 2013-01-17 14h00 +00:00 Cisco TelePresence Video Communication Server (VCS) X7.0.3 does not properly process certain search rules, which allows remote attackers to create conferences via an unspecified Conductor request, aka Bug ID CSCub67989.
5
CVE-2012-0330 2012-03-01 01h00 +00:00 Cisco TelePresence Video Communication Server with software before X7.0.1 allows remote attackers to cause a denial of service (device crash) via a malformed SIP message, aka Bug ID CSCtr20426.
7.8
CVE-2012-0331 2012-03-01 01h00 +00:00 Cisco TelePresence Video Communication Server with software before X7.0.1 allows remote attackers to cause a denial of service (device crash) via a crafted SIP packet, as demonstrated by a SIP INVITE message from a Tandberg device, aka Bug ID CSCtq73319.
7.5