CVE-2013-1176

high Cisco
CVSS v3 Base Score
7.1
AV:N/AC:M/Au:N/C:N/I:N/A:C
EPSS Score
0.4%
Exploitation probability in 30 days
Top 39% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
M
Confidentiality
None
Integrity
None
Availability
C
Published: April 18, 2013 (4773 days ago)
Last Modified: April 29, 2026
Vendor: Cisco
Source: NVD

Description

The DSP card on Cisco TelePresence MCU 4500 and 4501 devices before 4.3(2.30), TelePresence MCU MSE 8510 devices before 4.3(2.30), and TelePresence Server before 2.3(1.55) does not properly validate H.264 data, which allows remote attackers to cause a denial of service (device reload) via crafted RTP packets in a (1) SIP session or (2) H.323 session, aka Bug IDs CSCuc11328 and CSCub05448.

CWE

CWE-20

Affected Products

cisco telepresence mcu 4500 series softwarecisco telepresence mcu 4505cisco telepresence mcu 4510cisco telepresence mcu 4515cisco telepresence mcu 4520cisco telepresence mcu 4501 series softwarecisco telepresence mcu 4501cisco telepresence mcu mse series softwarecisco telepresence mcu mse 8510cisco telepresence server software

References

🔗 tools.cisco.com 🔗 tools.cisco.com