Multiple Cisco TelePresence Products CVE-2013-3377 Remote Denial of Service Vulnerability

Bugtraq ID:	60678
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2013-3377
Remote:	Yes
Local:	No
Published:	Jun 19 2013 12:00AM
Updated:	Jun 19 2013 12:00AM
Credit:	Cisco
Vulnerable:
Not Vulnerable:

Multiple Cisco TelePresence Products CVE-2013-3377 Remote Denial of Service Vulnerability

Multiple Cisco TelePresence Products are prone to a remote denial-of-service vulnerability.

An attacker can exploit this issue to cause an affected device to reload, denying service to legitimate users.

This issue is being tracked by Cisco Bug ID CSCue01743.

The following products are vulnerable:

Versions prior to Cisco TelePresence MX Series TC5.1.7
Versions prior to Cisco TelePresence System EX Series TC5.1.7
Versions prior to Cisco TelePresence Integrator C Series TC5.1.7
Versions prior to Cisco TelePresence Profiles Series running TC5.1.7
Versions prior to Cisco TelePresence Quick Set Series TC5.1.7
Versions prior to Cisco IP Video Phone E20 TE4.1.3

Multiple Cisco TelePresence Products CVE-2013-3377 Remote Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Multiple Cisco TelePresence Products CVE-2013-3377 Remote Denial of Service Vulnerability

References:

• Cisco Homepage (Cisco)
  
• Cisco TelePresence TC and TE Software SIP Denial of Service Vulnerability (Cisco)
  
• Multiple Vulnerabilities in Cisco TelePresence TC and TE Software (Cisco)