CVE-2015-0652: The Session Description Protocol (SDP) implementation in Cisco TelePresence Video Communication Server (VCS...

Security readout for executives and security teams

CVE-2015-0652 is a remote denial-of-service flaw in Cisco video collaboration infrastructure. A crafted SDP media description can trigger an exception and reload affected devices, disrupting TelePresence, Expressway, or Conductor services. The sources do not report data theft, code execution, or confirmed active exploitation. Exposure is most likely where affected Cisco VCS, Expressway, or Conductor systems remain on versions before X8.2 or XC2.4 and can receive untrusted session descriptions. Treat this as a service availability risk for legacy Cisco collaboration environments. Prioritize remediation if the systems support business-critical video communications or are reachable from untrusted networks. Mitigation focus: Review Cisco advisory cisco-sa-20150311-vcs for supported fixed releases.; Upgrade VCS and Expressway to X8.2 or later where applicable.; Upgrade TelePresence Conductor to XC2.4 or later where applicable..

Prepared

Jun 13, 2026, 22:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.