CVE-2009-2045
The Cisco Video Surveillance Stream Manager firmware before 5.3, as used on Cisco Video Surveillance Services Platforms and Video Surveillance Integrated Services Platforms, allows remote attackers to cause a denial of service (reboot) via a malformed…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (1.60%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
The Cisco Video Surveillance Stream Manager firmware before 5.3, as used on Cisco Video Surveillance Services Platforms and Video Surveillance Integrated Services Platforms, allows remote attackers to cause a denial of service (reboot) via a malformed payload in a UDP packet to port 37000, related to the xvcrman process, aka Bug ID CSCsj47924.
- CVSS 2.0
- 7.8 HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C
- EPSS
- 1.60% probability · 74th percentile
- CISA KEV
- Not listed
- Affected
- cisco/video surveillance stream manager
- Source
- psirt@cisco.com
References
- http://www.cisco.com/en/US/products/products_applied_mitigation_bulletin09186a0080ad1002.html
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080ad0f8f.shtmlPatch, Vendor Advisory
- http://www.securitytracker.com/id?1022446
- http://www.cisco.com/en/US/products/products_applied_mitigation_bulletin09186a0080ad1002.html
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080ad0f8f.shtmlPatch, Vendor Advisory
- http://www.securitytracker.com/id?1022446
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.