Multiple Cisco TelePresence Products CVE-2013-3378 Remote Denial of Service Vulnerability

Bugtraq ID:	60681
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2013-3378
Remote:	Yes
Local:	No
Published:	Jun 19 2013 12:00AM
Updated:	Jun 19 2013 12:00AM
Credit:	Knud from nSense
Vulnerable:
Not Vulnerable:

Multiple Cisco TelePresence Products CVE-2013-3378 Remote Denial of Service Vulnerability

Multiple Cisco TelePresence products are prone to a remote denial-of-service vulnerability.

Successfully exploiting this issue allows remote attackers to cause a denial of service condition.

This issue is being tracked by Cisco Bug ID CSCuf89557.

The following products are vulnerable:

Versions prior to Cisco TelePresence MX Series TC6.1
Versions prior to Cisco TelePresence System EX Series TC6.1
Versions prior to Cisco TelePresence Integrator C Series TC6.1
Versions prior to Cisco TelePresence Profiles Series TC6.1
Versions prior to Cisco TelePresence Quick Set Series TC6.1
Versions prior to Cisco IP Video Phone E20 TE4.1.3

Multiple Cisco TelePresence Products CVE-2013-3378 Remote Denial of Service Vulnerability

An attacker can exploit this issue using readily available tools.

Multiple Cisco TelePresence Products CVE-2013-3378 Remote Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Multiple Cisco TelePresence Products CVE-2013-3378 Remote Denial of Service Vulnerability

References:

• Cisco Homepage (Cisco)