5.9 Medium

CVE-2020-3596 A vulnerability in the Session Initiation Protocol (SIP) of Cisco Expressway Series and Cisco TelePresence Video…

Description

A vulnerability in the Session Initiation Protocol (SIP) of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to incorrect handling of incoming SIP traffic. An attacker could exploit this vulnerability by sending a series of SIP packets to an affected device. A successful exploit could allow the attacker to exhaust memory on an affected device, causing it to crash and leading to a DoS condition.

Affected products and versions

Product	Affected versions	Fixed in
Cisco TelePresence Video Communication Server (VCS) Expressway	Versions not published

References

20201007 Cisco Expressway Series and TelePresence Video Communication Server Denial of Service Vulnerability tools.cisco.com

Timeline

Published October 8, 2020
Last modified November 13, 2024

The 33 CVEs of Cisco TelePresence Video Communication Server (VCS) Expressway →

CVE-2026-76497 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software… 6.6 Medium CVE-2026-76496 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software… 7.0 High CVE-2026-76495 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software… 7.8 High CVE-2026-76494 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software… 7.8 High

Track this CVE