Vulnerabilities > CVE-2014-3397 - Resource Management Errors vulnerability in Cisco Telepresence MCU Software

047910
CVSS 7.8 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
COMPLETE
network
low complexity
cisco
CWE-399
nessus
NVD
Published: 2014-10-19
Updated: 2015-10-30

Summary

The network stack in Cisco TelePresence MCU Software before 4.3(2.30) allows remote attackers to cause a denial of service (memory consumption) via crafted TCP packets, aka Bug ID CSCtz35468.

Vulnerable Configurations

Part Description Count
Application
Cisco
6

Common Weakness Enumeration (CWE)

Nessus

NASL familyCISCO
NASL idCISCO_TELEPRESENCE_MCU_SA_20141015.NASL
descriptionAccording to the self-reported version, returned by either the SNMP or FTP service running on the remote device, the Cisco TelePresence MCU software is affected by a vulnerability that can allow a remote, unauthenticated attacker to cause a denial of service via memory exhaustion.
last seen2020-06-01
modified2020-06-02
plugin id78624
published2014-10-22
reporterThis script is Copyright (C) 2014-2018 Tenable Network Security, Inc.
sourcehttps://www.tenable.com/plugins/nessus/78624
titleCisco TelePresence MCU Software Memory Exhaustion

References