Cisco Products Multiple Vulnerabilities
Last Update Date:
16 May 2013 18:38
Release Date:
16 May 2013
4108
Views
RISK: Medium Risk
TYPE: Clients - Audio & Video
Multiple vulnerabilities has been identified in Cisco Products, which can be exploited by remote users to cause denial of service conditions.
- Cisco Unified Communications Manager does not properly throttle authentication requests. A remote user can send multiple authentication requests in a short period of time to cause performance degradation on the target application.
- For the Cisco TelePresence MSE 8050 Supervisor, a remote user can send a sequence of TCP segments at a high rate to the target management IP address to cause high CPU utilization on the target system. This may result in a reload of the target system.
Impact
- Denial of Service
System / Technologies affected
- Cisco Unified Communications Manager
- Cisco TelePresence MSE 8050; 2.2(1.17) and prior
Solutions
Before installation of the software, please visit the software manufacturer web-site for more details.
- The vendor has issued a fix for Cisco Unified Communications Manager.
- The vendor has issued a fix for Cisco TelePresence (MSE 8050; 2.3(1.31)).
Vulnerability Identifier
Source
Related Link
Share with