Lucene search

CiscoCVE-2014-0660

HistoryJan 22, 2014 - 9:55 p.m.

CVE-2014-0660

2014-01-2221:55:02

CWE-20

cisco

web.nvd.nist.gov

cisco

telepresence

isdn gateway

vulnerability

denial of service

cve-2014-0660

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

AI Score

6.7

Confidence

High

EPSS

0.012

Percentile

85.0%

JSON

Cisco TelePresence ISDN Gateway with software before 2.2(1.92) allows remote attackers to cause a denial of service (D-channel call outage) via a crafted Q.931 STATUS message, aka Bug ID CSCui50360.

Affected configurations

Nvd

Node

ciscotelepresence_isdn_gateway_softwareRange≤2.1\(1.79\)

ciscotelepresence_isdn_gateway_softwareMatch2.1\(1.43\)

ciscotelepresence_isdn_gateway_softwareMatch2.1\(1.49\)

ciscotelepresence_isdn_gateway_softwareMatch2.1\(1.56\)

VendorProductVersionCPE
ciscotelepresence_isdn_gateway_software*cpe:2.3:a:cisco:telepresence_isdn_gateway_software:*:*:*:*:*:*:*:*
ciscotelepresence_isdn_gateway_software2.1(1.43)cpe:2.3:a:cisco:telepresence_isdn_gateway_software:2.1\(1.43\):*:*:*:*:*:*:*
ciscotelepresence_isdn_gateway_software2.1(1.49)cpe:2.3:a:cisco:telepresence_isdn_gateway_software:2.1\(1.49\):*:*:*:*:*:*:*
ciscotelepresence_isdn_gateway_software2.1(1.56)cpe:2.3:a:cisco:telepresence_isdn_gateway_software:2.1\(1.56\):*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	telepresence_isdn_gateway_software	*	cpe:2.3:a:cisco:telepresence_isdn_gateway_software::::::::
cisco	telepresence_isdn_gateway_software	2.1(1.43)	cpe:2.3:a:cisco:telepresence_isdn_gateway_software:2.1\(1.43\):::::::*
cisco	telepresence_isdn_gateway_software	2.1(1.49)	cpe:2.3:a:cisco:telepresence_isdn_gateway_software:2.1\(1.49\):::::::*
cisco	telepresence_isdn_gateway_software	2.1(1.56)	cpe:2.3:a:cisco:telepresence_isdn_gateway_software:2.1\(1.56\):::::::*

References

osvdb.org/102361

secunia.com/advisories/56591

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140122-isdngw

tools.cisco.com/security/center/viewAlert.x?alertId=32460

www.securityfocus.com/bid/65072

www.securitytracker.com/id/1029657

exchange.xforce.ibmcloud.com/vulnerabilities/90622

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

AI Score

6.7

Confidence

High

EPSS

0.012

Percentile

85.0%

JSON

Related for CVE-2014-0660