Every CVE Search/ Get API key

CVE-2014-2156

Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a...

7.1 High

Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCty45739.

Exploit likelihood

1.17%Up 0.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.1

Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCty45739.

Record
CVE-2014-2156
CVSS 2.0
7.1 HighAV:N/AC:M/Au:N/C:N/I:N/A:C
Weakness
CWE-20
Updated
2026-11-02
CVE List No score

Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCty45739.

Record
CVE-2014-2156
Updated
2026-11-02
EUVDEUVD-2014-2196 No score

Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCty45739.

Record
EUVD-2014-2196
Updated
2026-11-03
GitHub AdvisoriesGHSA-rfvh-48qx-c843 No score

Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a...

Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCty45739.

Record
GHSA-rfvh-48qx-c843
Weakness
CWE-20
Updated
2026-11-02

Affected products

Show 1 moreShow less

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2014-2156 is a high vulnerability (CVSS 7.1) in Cisco Tandberg 2000 Mxp, published May 2, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.17%, the 67th percentile. No source names a fixed version.

References

MoveEnter Open