The Session Description Protocol (SDP) implementation in Cisco TelePresence Video Communication Server (VCS) and Cisco Expressway before X8.2 and Cisco TelePresence Conductor before XC2.4 allows remote attackers to cause a denial of service (mishandled exception and device reload) via a crafted media description, aka Bug IDs CSCus96593 and CSCun73192.
| Software | From | Fixed in |
|---|---|---|
| cisco / expressway_software | - | x8.1.1.x |
| cisco / telepresence_conductor | - | xc2.4.x |
| cisco / telepresence_video_communication_server_software | - | x8.1.1.x |