VULNERABILITY INTELLIGENCE
CVE-2014-4068
CVSS score5 MEDIUM
EPSS probability19.69%
CISA KEVNot currently listed
Published2014-09-10
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:P
Description
The Response Group Service in Microsoft Lync Server 2010 and 2013 and the Core Components in Lync Server 2013 do not properly handle exceptions, which allows remote attackers to cause a denial of service (daemon hang) via a crafted call, aka "Lync Denial of Service Vulnerability."
Weakness classification
- CWE-20: Improper Input Validation