A vulnerability in the XML API of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker to cause the CPU to increase to 100% utilization, causing a denial of service (DoS) condition on an affected system. The vulnerability is due to improper handling of the XML input. An attacker could exploit this vulnerability by sending a specifically crafted XML payload. A successful exploit could allow the attacker to exhaust CPU resources, resulting in a DoS condition until the system is manually rebooted. Software versions prior to X12.5.1 are affected.
History

Thu, 21 Nov 2024 20:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: cisco

Published: 2019-04-18T00:20:31.397254Z

Updated: 2024-11-21T19:39:34.308Z

Reserved: 2018-12-06T00:00:00

Link: CVE-2019-1720

cve-icon Vulnrichment

Updated: 2024-08-04T18:28:42.199Z

cve-icon NVD

Status : Modified

Published: 2019-04-18T01:29:01.827

Modified: 2024-11-21T04:37:10.500

Link: CVE-2019-1720

cve-icon Redhat

No data.