Vulnerabilities > CVE-2014-3397 - Resource Management Errors vulnerability in Cisco Telepresence MCU Software

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
cisco
CWE-399
nessus
NVD
Published: 2014-10-19
Updated: 2024-11-21

Summary

The network stack in Cisco TelePresence MCU Software before 4.3(2.30) allows remote attackers to cause a denial of service (memory consumption) via crafted TCP packets, aka Bug ID CSCtz35468.

Vulnerable Configurations

Part Description Count
Application
Cisco
6

Common Weakness Enumeration (CWE)

Nessus

NASL familyCISCO
NASL idCISCO_TELEPRESENCE_MCU_SA_20141015.NASL
descriptionAccording to the self-reported version, returned by either the SNMP or FTP service running on the remote device, the Cisco TelePresence MCU software is affected by a vulnerability that can allow a remote, unauthenticated attacker to cause a denial of service via memory exhaustion.
last seen2020-06-01
modified2020-06-02
plugin id78624
published2014-10-22
reporterThis script is Copyright (C) 2014-2018 Tenable Network Security, Inc.
sourcehttps://www.tenable.com/plugins/nessus/78624
titleCisco TelePresence MCU Software Memory Exhaustion

References