Description
Cisco TelePresence endpoint devices with software 1.2.x through 1.6.x allow remote attackers to cause a denial of service (service crash) via a malformed SOAP request in conjunction with a spoofed TelePresence Manager that supplies an invalid IP address, aka Bug ID CSCth03605.
References
- cisco-endpoint-ipaddress-dos(65616) vdb-entry
- 1025112 vdb-entry
- 20110223 Multiple Vulnerabilities in Cisco TelePresence Endpoint Devices vendor-advisory