← Vulnerability feed

Vulnerability record · CVE-2018-0358 · published 21 June 2018

CVE-2018-0358: Cisco telepresence video communication server allocation without limits vulnerability

Cisco · Telepresence Video Communication Server

A vulnerability in the file descriptor handling of Cisco TelePresence Video Communication Server (VCS) Expressway could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to exhaustion of file descriptors while processing a high volume of traffic. An attacker could exploit this vulnerability by establishing a high number of concurrent TCP connections to the vulnerable system. An exploit could allow the attacker to cause a restart in a specific process, resulting in a temporary interruption of service. Cisco Bug IDs: CSCvh77056, CSCvh77058, CSCvh95264.

7.5 CVSS 3.1 High EPSS 2.4% · top 16.9% CWE-769 · CWE-769CWE-770 · Allocation without limits
7.5CVSS 3.1 base score, v2 5.0
2.4%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
6References
17 Jun 2026Last modified by NVD

Description

A vulnerability in the file descriptor handling of Cisco TelePresence Video Communication Server (VCS) Expressway could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to exhaustion of file descriptors while processing a high volume of traffic. An attacker could exploit this vulnerability by establishing a high number of concurrent TCP connections to the vulnerable system. An exploit could allow the attacker to cause a restart in a specific process, resulting in a temporary interruption of service. Cisco Bug IDs: CSCvh77056, CSCvh77058, CSCvh95264.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.securityfocus.com/bid/104521 Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1041172 Third Party AdvisoryVDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180620-vcse-dos Vendor Advisory
http://www.securityfocus.com/bid/104521 Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1041172 Third Party AdvisoryVDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180620-vcse-dos Vendor Advisory

Track CVE-2018-0358 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.8CVE-2016-1468Cisco telepresence video communication server os command injection vulnerabilityThe administrative web interface in Cisco TelePresence Video Communication Server Expressway X8.5.2 allows remote authenticated users to execute arbi…EPSS 2.9%8.6CVE-2019-1845Cisco telepresence video communication server improper input validation vulnerabilityA vulnerability in the authentication service of the Cisco Unified Communications Manager IM and Presence (Unified CM IM&P) Service, Cisco TelePr…EPSS 4.6%8.6CVE-2017-3790Cisco expressway improper input validation vulnerabilityA vulnerability in the received packet parser of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) software could allow…EPSS 3.5%7.8CVE-2012-0330Cisco telepresence system software vulnerabilityCisco TelePresence Video Communication Server with software before X7.0.1 allows remote attackers to cause a denial of service (device crash) via a m…EPSS 1.3%7.7CVE-2023-20192Cisco telepresence video communication server improper input validation vulnerabilityMultiple vulnerabilities in Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated attacker wit…EPSS 0.66%7.5CVE-2020-3596Cisco expressway vulnerabilityA vulnerability in the Session Initiation Protocol (SIP) of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could all…EPSS 1.2%7.5CVE-2018-0409Cisco telepresence video communication server improper input validation vulnerabilityA vulnerability in the XCP Router service of the Cisco Unified Communications Manager IM & Presence Service (CUCM IM&P) and the Cisco TelePresence Vi…EPSS 3.5%7.5CVE-2016-1400Cisco telepresence video communication server improper input validation vulnerabilityCisco TelePresence Video Communications Server (VCS) X8.x before X8.7.2 allows remote attackers to cause a denial of service (service disruption) via…EPSS 1.8%

Source: NIST National Vulnerability Database (record CVE-2018-0358), CISA KEV, FIRST EPSS (scores of 2026-09-29). This page is refreshed as NVD updates the record.