CVE-2015-0652 describes a denial-of-service vulnerability in Cisco TelePresence Video Communication Server (VCS), Expressway, and TelePresence Conductor, affecting versions before X8.2 and XC2.4 respectively. A remote attacker can trigger a device reload by sending a crafted Session Description Protocol (SDP) media description. This vulnerability has a CVSS score of 7.8, indicating high severity due to its network-based attack vector, low complexity, and complete denial-of-service impact. There is no public exploit code available (Metasploit, Nuclei, ExploitDB), and it is not listed in CISA's KEV catalog, suggesting it is not actively exploited. Community discussion and media coverage are minimal, with only one mention and one article found.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= x8.1.1CPE matchmatch criteria | cpe:2.3:a:cisco:expressway_software:*:*:*:*:*:*:*:* | ||
<= xc2.4CPE matchmatch criteria | cpe:2.3:a:cisco:telepresence_conductor:*:prealpha0:*:*:*:*:*:* | ||
<= x8.1.1CPE matchmatch criteria | cpe:2.3:a:cisco:telepresence_video_communication_server_software:*:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:N/I:N/A:C
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.