Every CVE Search/ Get API key

CVE-2014-3368

Cisco TelePresence Video Communication Server (VCS) and Expressway Software before X8.2 allow...

7.8 High

Cisco TelePresence Video Communication Server (VCS) and Expressway Software before X8.2 allow remote attackers to cause a denial of service (device reload) via a high rate of crafted packets, aka Bug ID CSCui06507.

Exploit likelihood

3.95%Up 2.7 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.8

Cisco TelePresence Video Communication Server (VCS) and Expressway Software before X8.2 allow remote attackers to cause a denial of service (device reload) via a high rate of crafted packets, aka Bug ID CSCui06507.

Record
CVE-2014-3368
CVSS 2.0
7.8 HighAV:N/AC:L/Au:N/C:N/I:N/A:C
Weakness
CWE-399
Updated
2026-11-02
CVE List No score

Cisco TelePresence Video Communication Server (VCS) and Expressway Software before X8.2 allow remote attackers to cause a denial of service (device reload) via a high rate of crafted packets, aka Bug ID CSCui06507.

Record
CVE-2014-3368
Updated
2026-11-02
EUVDEUVD-2014-3381 No score

Cisco TelePresence Video Communication Server (VCS) and Expressway Software before X8.2 allow remote attackers to cause a denial of service (device reload) via a high rate of crafted packets, aka Bug ID CSCui06507.

Record
EUVD-2014-3381
Updated
2026-11-03
GitHub AdvisoriesGHSA-w62x-587h-wg93 No score

Cisco TelePresence Video Communication Server (VCS) and Expressway Software before X8.2 allow...

Cisco TelePresence Video Communication Server (VCS) and Expressway Software before X8.2 allow remote attackers to cause a denial of service (device reload) via a high rate of crafted packets, aka Bug ID CSCui06507.

Record
GHSA-w62x-587h-wg93
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2014-3368 is a high vulnerability (CVSS 7.8) in Cisco Expressway Software, published October 19, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.95%, the 90th percentile. No source names a fixed version.

References

MoveEnter Open