Read the docs

Cisco

Records7060All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical694CVSS 9.0–10.0
CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

25 records in Telepresence System Software · all components

Priority MEDIUM 49

The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote attackers to execute arbitrary commands via a malformed request, related to "command injection vulnerabilities…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.03346 Published 2011-02-25 No fix listed CWE-78
Priority MEDIUM 47

Cisco TelePresence System Software 1.10.1 and earlier on 500, 13X0, 1X00, 30X0, and 3X00 devices, and 6.0.3 and earlier on TX 9X00 devices, has a default password for the pwrecovery account, which makes it easier for rem…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.02096 Published 2013-08-08 No fix listed CWE-255
Priority MEDIUM 44

The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.6.x allows remote authenticated users to execute arbitrary commands via a malformed request, related to "command injection vulne…

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.02795 Published 2011-02-25 No fix listed CWE-78
Priority MEDIUM 44

The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote authenticated users to execute arbitrary commands via a malformed request, related to "command injection vulne…

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.02795 Published 2011-02-25 No fix listed CWE-78
Priority MEDIUM 44

The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote authenticated users to execute arbitrary commands via a malformed request, related to "command injection vulne…

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.02795 Published 2011-02-25 No fix listed CWE-78
Priority MEDIUM 43

The administrative web interface on Cisco TelePresence Immersive Endpoint Devices before 1.7.4 allows remote authenticated users to execute arbitrary commands via a malformed request on TCP port 443, aka Bug ID CSCtn9972…

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.02165 Published 2012-07-12 No fix listed CWE-78
Priority MEDIUM 40

The System Status Collection Daemon (SSCD) in Cisco TelePresence System 500-37, 1000, 1300-65, and 3xxx before 1.10.2(42), and 500-32, 1300-47, TX1310 65, and TX9xxx before 6.0.4(11), allows remote attackers to execute a…

CVSS 2.0HIGH 8.3 Adjacent network No auth Interaction — EPSS 0.02303 Published 2014-01-22 No fix listed CWE-94
Priority MEDIUM 40

The Cisco Discovery Protocol (CDP) implementation on Cisco TelePresence Multipoint Switch before 1.9.0, Cisco TelePresence Immersive Endpoint Devices before 1.9.1, Cisco TelePresence Manager before 1.9.0, and Cisco TeleP…

CVSS 2.0HIGH 8.3 Adjacent network No auth Interaction — EPSS 0.01745 Published 2012-07-12 No fix listed CWE-94
Priority LOW 39

Buffer overflow on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 1.6.x; Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x; Cisco TelePresence en…

CVSS 2.0HIGH 7.9 Adjacent network No auth Interaction — EPSS 0.0215 Published 2011-02-25 No fix listed CWE-119
Priority LOW 39

The XML-RPC implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote attackers to execute arbitrary commands via a TCP request, related to a "command injection vulnerability,"…

CVSS 2.0HIGH 8.3 Adjacent network No auth Interaction — EPSS 0.01382 Published 2011-02-25 No fix listed CWE-78
Priority LOW 39

Cisco TelePresence endpoint devices with software 1.2.x through 1.6.x allow remote attackers to cause a denial of service (service crash) via a malformed SOAP request in conjunction with a spoofed TelePresence Manager th…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.02542 Published 2011-02-25 No fix listed CWE-399
Priority LOW 38

An unspecified API on Cisco TelePresence Immersive Endpoint Devices before 1.9.1 allows remote attackers to execute arbitrary commands by leveraging certain adjacency and sending a malformed request on TCP port 61460, ak…

CVSS 2.0HIGH 8.3 Adjacent network No auth Interaction — EPSS 0.01159 Published 2012-07-12 No fix listed CWE-78
Priority LOW 38

The IP implementation on Cisco TelePresence Multipoint Switch before 1.8.1, Cisco TelePresence Manager before 1.9.0, and Cisco TelePresence Recording Server 1.8 and earlier allows remote attackers to cause a denial of se…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.01799 Published 2012-07-12 No fix listed
Priority LOW 33

Cisco TelePresence System Software does not properly handle inactive t-shell sessions, which allows remote authenticated users to cause a denial of service (memory consumption and service outage) by establishing multiple…

CVSS 2.0MEDIUM 6.8 Network Low privileges Interaction — EPSS 0.01664 Published 2013-05-31 No fix listed CWE-399
Open these records in search →