What is the CVSS score of CVE-2013-3377?

CVE-2013-3377 has a CVSS 2.0 base score of 7.8 (High). CVSS vector: AV:N/AC:L/Au:N/C:N/I:N/A:C. EPSS exploitation probability: 0.4%.

Telepresence Codec C40 CVE-2013-3377

HIGH

Resource Management Errors (CWE-399)

2013-06-21 psirt@cisco.com

Denial Of Service Cisco Telepresence Codec C40 Telepresence Codec C60 Telepresence Codec C90 Telepresence Ex60 Telepresence Ex90 Ip Video Phone E20 Telepresence Tc Software Telepresence Mx200 Telepresence Mx300 Telepresence Profile 55 Telepresence Profile 65 Telepresence Quick Set C20 Telepresence Quick Set Sx20 Telepresence Te Software

7.8

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

7.8 HIGH

AV:N/AC:L/Au:N/C:N/I:N/A:C

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Confidentiality

None

Integrity

None

Availability

Lifecycle Timeline

CVE Published

Jun 21, 2013 - 13:57 cve.org

HIGH 7.8

DescriptionCVE.org

Cisco TelePresence TC Software before 5.1.7 and TE Software before 4.1.3 allow remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCue01743.

AnalysisAI

Cisco TelePresence TC Software before 5.1.7 and TE Software before 4.1.3 allow remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCue01743. Rated high severity (CVSS 7.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-399. Cisco TelePresence TC Software before 5.1.7 and TE Software before 4.1.3 allow remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCue01743. Affected products include: Cisco Telepresence Tc Software, Cisco Ip Video Phone E20, Cisco Telepresence Codec C40, Cisco Telepresence Codec C60, Cisco Telepresence Codec C90. Version information: before 5.1.7.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.