Unscored severity · published Sep 12, 2014
CVE-2014-3362
Memory leak in Cisco TelePresence System Edge MXP Series Software F9.3.3 and earlier allows remote attackers to cause a denial of service (management outage) via multiple TELNET…
–
CVSS
2.8%
EPSS
No
On KEV
Description
Memory leak in Cisco TelePresence System Edge MXP Series Software F9.3.3 and earlier allows remote attackers to cause a denial of service (management outage) via multiple TELNET connections, aka Bug ID CSCuo63677.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.8% · higher than 86% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TS
Telepresence System Edge 75 Mxp · Cisco
All versions, or not specified · source: NVD
TS
Telepresence System Edge 85 Mxp · Cisco
All versions, or not specified · source: NVD
TS
Telepresence System Edge 95 Mxp · Cisco
All versions, or not specified · source: NVD
TS
Telepresence System Software · Cisco
through f9.3.3; f9.0.1; f9.0.2; f9.1.0; f9.1.1; f9.1.2; +6 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-3362
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-3362
secunia.com
http://secunia.com/advisories/61072
Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3362
Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=35674
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/95883
More from Telepresence System Edge 75 Mxp
–
CVE-2014-2161
The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted packets, aka…
–
CVE-2014-2160
The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted packets, aka…
–
CVE-2014-2159
The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted packets, aka…
–
CVE-2014-2158
Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCty45720
–
CVE-2014-2157
Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCty45733