Lucene search

K
cveCiscoCVE-2014-3397
HistoryOct 19, 2014 - 1:55 a.m.

CVE-2014-3397

2014-10-1901:55:13
CWE-399
cisco
web.nvd.nist.gov
29
cisco
telepresence
mcu
software
vulnerability
denial of service
memory consumption
tcp packets
bug id
csctz35468
cve-2014-3397

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.7

Confidence

High

EPSS

0.007

Percentile

80.0%

The network stack in Cisco TelePresence MCU Software before 4.3(2.30) allows remote attackers to cause a denial of service (memory consumption) via crafted TCP packets, aka Bug ID CSCtz35468.

Affected configurations

Nvd
Node
ciscotelepresence_mcu_softwareRange4.3\(2.18\)
VendorProductVersionCPE
ciscotelepresence_mcu_software*cpe:2.3:a:cisco:telepresence_mcu_software:*:*:*:*:*:*:*:*

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.7

Confidence

High

EPSS

0.007

Percentile

80.0%