Priority MEDIUM 49
The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote attackers to execute arbitrary commands via a malformed request, related to "command injection vulnerabilities…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.03346 · Published 2011-02-25 · No fix listed CWE-78
Priority MEDIUM 48
The TFTP implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x, 1.6.0, and 1.6.1 allows remote attackers to obtain sensitive information via a GET request, aka Bug ID CSCte43876.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.02631 · Published 2011-02-25 · No fix listed CWE-200
Priority MEDIUM 47
Cisco TelePresence System Software 1.10.1 and earlier on 500, 13X0, 1X00, 30X0, and 3X00 devices, and 6.0.3 and earlier on TX 9X00 devices, has a default password for the pwrecovery account, which makes it easier for rem…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.02096 · Published 2013-08-08 · No fix listed CWE-255
Priority MEDIUM 44
The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.6.x allows remote authenticated users to execute arbitrary commands via a malformed request, related to "command injection vulne…
CVSS 2.0HIGH 9.0· Network · Low privileges · Interaction — · EPSS 0.02795 · Published 2011-02-25 · No fix listed CWE-78
Priority MEDIUM 44
The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote authenticated users to execute arbitrary commands via a malformed request, related to "command injection vulne…
CVSS 2.0HIGH 9.0· Network · Low privileges · Interaction — · EPSS 0.02795 · Published 2011-02-25 · No fix listed CWE-78
Priority MEDIUM 44
The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote authenticated users to execute arbitrary commands via a malformed request, related to "command injection vulne…
CVSS 2.0HIGH 9.0· Network · Low privileges · Interaction — · EPSS 0.02795 · Published 2011-02-25 · No fix listed CWE-78
Priority MEDIUM 43
The administrative web interface on Cisco TelePresence Immersive Endpoint Devices before 1.7.4 allows remote authenticated users to execute arbitrary commands via a malformed request on TCP port 443, aka Bug ID CSCtn9972…
CVSS 2.0HIGH 9.0· Network · Low privileges · Interaction — · EPSS 0.02165 · Published 2012-07-12 · No fix listed CWE-78
Priority MEDIUM 40
The System Status Collection Daemon (SSCD) in Cisco TelePresence System 500-37, 1000, 1300-65, and 3xxx before 1.10.2(42), and 500-32, 1300-47, TX1310 65, and TX9xxx before 6.0.4(11), allows remote attackers to execute a…
CVSS 2.0HIGH 8.3· Adjacent network · No auth · Interaction — · EPSS 0.02303 · Published 2014-01-22 · No fix listed CWE-94
Priority MEDIUM 40
The Cisco Discovery Protocol (CDP) implementation on Cisco TelePresence Multipoint Switch before 1.9.0, Cisco TelePresence Immersive Endpoint Devices before 1.9.1, Cisco TelePresence Manager before 1.9.0, and Cisco TeleP…
CVSS 2.0HIGH 8.3· Adjacent network · No auth · Interaction — · EPSS 0.01745 · Published 2012-07-12 · No fix listed CWE-94
Priority LOW 39
Memory leak in Cisco TelePresence System Edge MXP Series Software F9.3.3 and earlier allows remote attackers to cause a denial of service (management outage) via multiple TELNET connections, aka Bug ID CSCuo63677.
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.02751 · Published 2014-09-12 · No fix listed CWE-399
Priority LOW 39
Buffer overflow on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 1.6.x; Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x; Cisco TelePresence en…
CVSS 2.0HIGH 7.9· Adjacent network · No auth · Interaction — · EPSS 0.0215 · Published 2011-02-25 · No fix listed CWE-119
Priority LOW 39
The XML-RPC implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote attackers to execute arbitrary commands via a TCP request, related to a "command injection vulnerability,"…
CVSS 2.0HIGH 8.3· Adjacent network · No auth · Interaction — · EPSS 0.01382 · Published 2011-02-25 · No fix listed CWE-78
Priority LOW 39
Cisco TelePresence endpoint devices with software 1.2.x through 1.6.x allow remote attackers to cause a denial of service (service crash) via a malformed SOAP request in conjunction with a spoofed TelePresence Manager th…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.02542 · Published 2011-02-25 · No fix listed CWE-399
Priority LOW 38
An unspecified API on Cisco TelePresence Immersive Endpoint Devices before 1.9.1 allows remote attackers to execute arbitrary commands by leveraging certain adjacency and sending a malformed request on TCP port 61460, ak…
CVSS 2.0HIGH 8.3· Adjacent network · No auth · Interaction — · EPSS 0.01159 · Published 2012-07-12 · No fix listed CWE-78
Priority LOW 38
The IP implementation on Cisco TelePresence Multipoint Switch before 1.8.1, Cisco TelePresence Manager before 1.9.0, and Cisco TelePresence Recording Server 1.8 and earlier allows remote attackers to cause a denial of se…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.01799 · Published 2012-07-12 · No fix listed
Priority LOW 37
The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted packets, aka Bug ID CSCty45731.
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.01614 · Published 2014-05-02 · No fix listed CWE-20
Priority LOW 37
The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted packets, aka Bug ID CSCty45745.
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.01614 · Published 2014-05-02 · No fix listed CWE-20
Priority LOW 37
The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted packets, aka Bug ID CSCtq78722.
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.01614 · Published 2014-05-02 · No fix listed CWE-20
Priority LOW 37
Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCty45720.
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.01328 · Published 2014-05-02 · No fix listed CWE-20
Priority LOW 36
Cisco TelePresence Video Communication Server with software before X7.0.1 allows remote attackers to cause a denial of service (device crash) via a malformed SIP message, aka Bug ID CSCtr20426.
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.01205 · Published 2012-03-01 · No fix listed CWE-399
Priority LOW 35
Cisco TelePresence Video Communication Server with software before X7.0.1 allows remote attackers to cause a denial of service (device crash) via a crafted SIP packet, as demonstrated by a SIP INVITE message from a Tandb…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.01201 · Published 2012-03-01 · No fix listed CWE-399
Priority LOW 34
Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCty45733.
CVSS 2.0HIGH 7.1· Network · No auth · Interaction — · EPSS 0.01169 · Published 2014-05-02 · No fix listed CWE-20
Priority LOW 34
Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCty45739.
CVSS 2.0HIGH 7.1· Network · No auth · Interaction — · EPSS 0.01169 · Published 2014-05-02 · No fix listed CWE-20
Priority LOW 33
Cisco TelePresence System Software does not properly handle inactive t-shell sessions, which allows remote authenticated users to cause a denial of service (memory consumption and service outage) by establishing multiple…
CVSS 2.0MEDIUM 6.8· Network · Low privileges · Interaction — · EPSS 0.01664 · Published 2013-05-31 · No fix listed CWE-399
Priority LOW 22
Cisco TelePresence System (CTS) 6.0(.5)(5) and earlier falls back to HTTP when certain HTTPS sessions cannot be established, which allows man-in-the-middle attackers to obtain sensitive directory information by leveragin…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01129 · Published 2014-05-23 · No fix listed CWE-310