Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 allows remote attackers to cause a denial of service via invalid variables in a GET request, aka Bug ID CSCuv40528.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2015-4341
http://www.securitytracker.com/id/1033281
http://www.securityfocus.com/bid/76347
http://tools.cisco.com/security/center/viewAlert.x?alertId=40443