Details of VAR-201306-0160

ID

VAR-201306-0160

CVE

CVE-2013-3377

TITLE

Cisco TelePresence TC Software and TE Software Service disruption in (DoS) Vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2013-003093

DESCRIPTION

Cisco TelePresence TC Software before 5.1.7 and TE Software before 4.1.3 allow remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCue01743. Multiple Cisco TelePresence Products are prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause an affected device to reload, denying service to legitimate users. This issue is being tracked by Cisco Bug ID CSCue01743. The following products are vulnerable: Versions prior to Cisco TelePresence MX Series TC5.1.7 Versions prior to Cisco TelePresence System EX Series TC5.1.7 Versions prior to Cisco TelePresence Integrator C Series TC5.1.7 Versions prior to Cisco TelePresence Profiles Series running TC5.1.7 Versions prior to Cisco TelePresence Quick Set Series TC5.1.7 Versions prior to Cisco IP Video Phone E20 TE4.1.3. Cisco TelePresence is a set of video conferencing solutions called "TelePresence" system of Cisco (Cisco). The solution provides components such as audio and video spaces, which can provide remote participants with a "face-to-face" virtual meeting room effect

Trust: 2.07

sources: NVD: CVE-2013-3377 // JVNDB: JVNDB-2013-003093 // BID: 60678 // VULHUB: VHN-63379 // VULMON: CVE-2013-3377

AFFECTED PRODUCTS

vendor:	cisco	model:	telepresence tc software	scope:	eq	version:	5.1.0	Trust: 1.6
vendor:	cisco	model:	telepresence tc software	scope:	eq	version:	5.1.1	Trust: 1.6
vendor:	cisco	model:	telepresence tc software	scope:	eq	version:	5.0.1	Trust: 1.6
vendor:	cisco	model:	telepresence te software	scope:	eq	version:	4.1.1	Trust: 1.6
vendor:	cisco	model:	telepresence tc software	scope:	eq	version:	5.0.2	Trust: 1.6
vendor:	cisco	model:	telepresence tc software	scope:	eq	version:	5.1.2	Trust: 1.6
vendor:	cisco	model:	telepresence tc software	scope:	eq	version:	5.1.3	Trust: 1.6
vendor:	cisco	model:	telepresence tc software	scope:	eq	version:	5.1.4	Trust: 1.6
vendor:	cisco	model:	telepresence te software	scope:	eq	version:	4.1.0	Trust: 1.6
vendor:	cisco	model:	telepresence mx200	scope:	eq	version:	-	Trust: 1.0
vendor:	cisco	model:	telepresence mx300	scope:	eq	version:	-	Trust: 1.0
vendor:	cisco	model:	telepresence codec c90	scope:	eq	version:	-	Trust: 1.0
vendor:	cisco	model:	telepresence codec c60	scope:	eq	version:	-	Trust: 1.0
vendor:	cisco	model:	telepresence profile 65	scope:	eq	version:	-	Trust: 1.0
vendor:	cisco	model:	telepresence quick set c20	scope:	eq	version:	-	Trust: 1.0
vendor:	cisco	model:	telepresence tc software	scope:	eq	version:	5.0.0	Trust: 1.0
vendor:	cisco	model:	telepresence codec c40	scope:	eq	version:	-	Trust: 1.0
vendor:	cisco	model:	telepresence tc software	scope:	eq	version:	5.1.5	Trust: 1.0
vendor:	cisco	model:	ip video phone e20	scope:	eq	version:	-	Trust: 1.0
vendor:	cisco	model:	telepresence quick set sx20	scope:	eq	version:	-	Trust: 1.0
vendor:	cisco	model:	telepresence profile 55	scope:	eq	version:	-	Trust: 1.0
vendor:	cisco	model:	telepresence te software	scope:	lte	version:	4.1.2	Trust: 1.0
vendor:	cisco	model:	telepresence ex90	scope:	eq	version:	-	Trust: 1.0
vendor:	cisco	model:	telepresence tc software	scope:	lte	version:	5.1.6	Trust: 1.0
vendor:	cisco	model:	telepresence ex60	scope:	eq	version:	-	Trust: 1.0
vendor:	cisco	model:	telepresence profile 65	scope:	-	version:	-	Trust: 0.8
vendor:	cisco	model:	telepresence te software	scope:	eq	version:	6.0	Trust: 0.8
vendor:	cisco	model:	telepresence codec c60	scope:	-	version:	-	Trust: 0.8
vendor:	cisco	model:	telepresence codec c90	scope:	-	version:	-	Trust: 0.8
vendor:	cisco	model:	telepresence ex90	scope:	-	version:	-	Trust: 0.8
vendor:	cisco	model:	telepresence ex60	scope:	-	version:	-	Trust: 0.8
vendor:	cisco	model:	telepresence codec c40	scope:	-	version:	-	Trust: 0.8
vendor:	cisco	model:	telepresence profile 55	scope:	-	version:	-	Trust: 0.8
vendor:	cisco	model:	ip video phone e20 software	scope:	-	version:	-	Trust: 0.8
vendor:	cisco	model:	telepresence te software	scope:	eq	version:	4.1.3	Trust: 0.8
vendor:	cisco	model:	telepresence sx20 quick set	scope:	-	version:	-	Trust: 0.8
vendor:	cisco	model:	telepresence tc software	scope:	lt	version:	5.x	Trust: 0.8
vendor:	cisco	model:	telepresence tc software	scope:	eq	version:	5.1.7	Trust: 0.8
vendor:	cisco	model:	telepresence te software	scope:	lt	version:	4.x	Trust: 0.8
vendor:	cisco	model:	telepresence mx200	scope:	-	version:	-	Trust: 0.8
vendor:	cisco	model:	telepresence mx300	scope:	-	version:	-	Trust: 0.8
vendor:	cisco	model:	telepresence quick set c20	scope:	-	version:	-	Trust: 0.8
vendor:	cisco	model:	telepresence te software	scope:	eq	version:	4.1.2	Trust: 0.6

sources: JVNDB: JVNDB-2013-003093 // CNNVD: CNNVD-201306-382 // NVD: CVE-2013-3377

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2013-3377
value:	HIGH
Trust: 1.0
NVD:	CVE-2013-3377
value:	HIGH
Trust: 0.8
CNNVD:	CNNVD-201306-382
value:	HIGH
Trust: 0.6
VULHUB:	VHN-63379
value:	HIGH
Trust: 0.1
VULMON:	CVE-2013-3377
value:	HIGH
Trust: 0.1

nvd@nist.gov:	CVE-2013-3377
severity:	HIGH
baseScore:	7.8
vectorString:	AV:N/AC:L/AU:N/C:N/I:N/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	COMPLETE
exploitabilityScore:	10.0
impactScore:	6.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.9
VULHUB:	VHN-63379
severity:	HIGH
baseScore:	7.8
vectorString:	AV:N/AC:L/AU:N/C:N/I:N/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	COMPLETE
exploitabilityScore:	10.0
impactScore:	6.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

sources: VULHUB: VHN-63379 // VULMON: CVE-2013-3377 // JVNDB: JVNDB-2013-003093 // CNNVD: CNNVD-201306-382 // NVD: CVE-2013-3377

PROBLEMTYPE DATA

problemtype:

CWE-399

Trust: 1.9

sources: VULHUB: VHN-63379 // JVNDB: JVNDB-2013-003093 // NVD: CVE-2013-3377

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201306-382

TYPE

resource management error

Trust: 0.6

sources: CNNVD: CNNVD-201306-382

CONFIGURATIONS

sources: JVNDB: JVNDB-2013-003093

PATCH

title:	cisco-sa-20130619-tpc	url:	http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130619-tpc	Trust: 0.8
title:	29653	url:	http://tools.cisco.com/security/center/viewAlert.x?alertId=29653	Trust: 0.8
title:	cisco-sa-20130619-tpc	url:	http://www.cisco.com/cisco/web/support/JP/111/1118/1118409_cisco-sa-20130619-tpc-j.html	Trust: 0.8

sources: JVNDB: JVNDB-2013-003093

EXTERNAL IDS

db:	NVD	id:	CVE-2013-3377	Trust: 2.9
db:	BID	id:	60678	Trust: 1.0
db:	JVNDB	id:	JVNDB-2013-003093	Trust: 0.8
db:	CNNVD	id:	CNNVD-201306-382	Trust: 0.7
db:	CISCO	id:	20130619 MULTIPLE VULNERABILITIES IN CISCO TELEPRESENCE TC AND TE SOFTWARE	Trust: 0.6
db:	VULHUB	id:	VHN-63379	Trust: 0.1
db:	VULMON	id:	CVE-2013-3377	Trust: 0.1

sources: VULHUB: VHN-63379 // VULMON: CVE-2013-3377 // BID: 60678 // JVNDB: JVNDB-2013-003093 // CNNVD: CNNVD-201306-382 // NVD: CVE-2013-3377

REFERENCES

url:	http://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-20130619-tpc	Trust: 2.1
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2013-3377	Trust: 0.8
url:	http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2013-3377	Trust: 0.8
url:	http://www.securityfocus.com/bid/60678	Trust: 0.6
url:	http://www.cisco.com/	Trust: 0.3
url:	http://tools.cisco.com/security/center/viewalert.x?alertid=29653	Trust: 0.3
url:	https://cwe.mitre.org/data/definitions/399.html	Trust: 0.1
url:	https://nvd.nist.gov	Trust: 0.1

sources: VULHUB: VHN-63379 // VULMON: CVE-2013-3377 // BID: 60678 // JVNDB: JVNDB-2013-003093 // CNNVD: CNNVD-201306-382 // NVD: CVE-2013-3377

CREDITS

Cisco

Trust: 0.9

sources: BID: 60678 // CNNVD: CNNVD-201306-382

SOURCES

db:	VULHUB	id:	VHN-63379
db:	VULMON	id:	CVE-2013-3377
db:	BID	id:	60678
db:	JVNDB	id:	JVNDB-2013-003093
db:	CNNVD	id:	CNNVD-201306-382
db:	NVD	id:	CVE-2013-3377

LAST UPDATE DATE

2024-08-14T13:58:17.671000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-63379	date:	2013-06-21T00:00:00
db:	VULMON	id:	CVE-2013-3377	date:	2013-06-21T00:00:00
db:	BID	id:	60678	date:	2013-06-19T00:00:00
db:	JVNDB	id:	JVNDB-2013-003093	date:	2013-06-24T00:00:00
db:	CNNVD	id:	CNNVD-201306-382	date:	2013-06-24T00:00:00
db:	NVD	id:	CVE-2013-3377	date:	2013-06-21T17:29:29.187

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-63379	date:	2013-06-21T00:00:00
db:	VULMON	id:	CVE-2013-3377	date:	2013-06-21T00:00:00
db:	BID	id:	60678	date:	2013-06-19T00:00:00
db:	JVNDB	id:	JVNDB-2013-003093	date:	2013-06-24T00:00:00
db:	CNNVD	id:	CNNVD-201306-382	date:	2013-06-24T00:00:00
db:	NVD	id:	CVE-2013-3377	date:	2013-06-21T13:57:25.623