| Package | Affected versions | Patched versions |
|---|---|---|
| expressway software | ≤ x8.1.1 | |
| telepresence conductor | ≤ xc2.4 | |
| telepresence video communication server software | ≤ x8.1.1 |
The Session Description Protocol (SDP) implementation in Cisco TelePresence Video Communication Server (VCS) and Cisco Expressway before X8.2 and Cisco TelePresence Conductor before XC2.4 allows remote attackers to cause a denial of service (mishandled exception and device reload) via a crafted media description, aka Bug IDs CSCus96593 and CSCun73192.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free