Priority MEDIUM 49
Heap-based buffer overflow in Cisco TelePresence TC Software 4.x through 6.x before 6.0.1 and TE Software 4.x and 6.0.x before 6.0.2 allows remote attackers to execute arbitrary code via crafted SIP packets, aka Bug ID C…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.03592 · Published 2014-05-02 · No fix listed CWE-119
Priority MEDIUM 46
The XML API in TelePresence Codec (TC) 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.3.2, 7.3.3, 7.3.4, and 7.3.5 and Collaboration Endpoint (CE) 8.0.0, 8.0.1, and 8.1.0 in Cisco TelePresence Software mishandles authentication, which al…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01778 · Published 2016-05-05 · No fix listed CWE-287
Priority MEDIUM 43
Cisco TelePresence TC Software 4.x and 5.x before 5.1.7 and 6.x before 6.0.1 and TE Software 4.x and 6.0 allow remote authenticated users to execute arbitrary commands by using the commands as arguments to tshell (aka tc…
CVSS 2.0HIGH 9.0· Network · Low privileges · Interaction — · EPSS 0.02165 · Published 2014-05-02 · No fix listed CWE-94
Priority MEDIUM 43
Cisco TelePresence TC Software 4.x through 6.x before 6.2.0 and TE Software 4.x and 6.0 allow remote authenticated users to execute arbitrary commands by using the commands as arguments to internal system scripts, aka Bu…
CVSS 2.0HIGH 9.0· Network · Low privileges · Interaction — · EPSS 0.02088 · Published 2014-05-02 · No fix listed CWE-20
Priority LOW 39
A vulnerability in the Session Initiation Protocol (SIP) of the Cisco TelePresence Codec (TC) and Collaboration Endpoint (CE) Software could allow an unauthenticated, remote attacker to cause a TelePresence endpoint to r…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.03564 · Published 2017-06-08 · No fix listed CWE-399
Priority LOW 38
The network drivers in Cisco TelePresence T, Cisco TelePresence TE, and Cisco TelePresence TC before 7.3.2 allow remote attackers to cause a denial of service (process restart or device reload) via a flood of crafted IP…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.01887 · Published 2015-05-25 · No fix listed CWE-399
Priority LOW 38
Cisco TelePresence T, TelePresence TE, and TelePresence TC before 7.1 do not properly implement access control, which allows remote attackers to obtain root privileges by sending packets on the local network and allows p…
CVSS 2.0HIGH 8.3· Adjacent network · No auth · Interaction — · EPSS 0.00952 · Published 2015-05-25 · No fix listed CWE-284
Priority LOW 38
Buffer overflow in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to execute arbitrary code via crafted DNS response packets, aka Bug ID CSCty44804.
CVSS 2.0HIGH 7.6· Network · No auth · Interaction — · EPSS 0.02752 · Published 2014-05-02 · No fix listed CWE-119
Priority LOW 38
The firewall subsystem in Cisco TelePresence TC Software before 4.2 does not properly implement rules that grant access to hosts, which allows remote attackers to obtain shell access with root privileges by leveraging co…
CVSS 2.0HIGH 8.3· Adjacent network · No auth · Interaction — · EPSS 0.01005 · Published 2013-06-21 · No fix listed CWE-264
Priority LOW 38
Cisco TelePresence TC Software before 6.1 and TE Software before 4.1.3 allow remote attackers to cause a denial of service (temporary device hang) via crafted SIP packets, aka Bug ID CSCuf89557.
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.01887 · Published 2013-06-21 · No fix listed CWE-20
Priority LOW 38
Cisco TelePresence TC Software before 5.1.7 and TE Software before 4.1.3 allow remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCue01743.
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.01887 · Published 2013-06-21 · No fix listed CWE-399
Priority LOW 37
Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allow remote attackers to cause a denial of service (memory consumption) via crafted H.225 packets, aka Bug ID CSCtq78849.
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.01328 · Published 2014-05-02 · No fix listed CWE-20
Priority LOW 37
The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCua86589.
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.01328 · Published 2014-05-02 · No fix listed CWE-20
Priority LOW 37
The SIP implementation in Cisco TelePresence TC Software 4.x and TE Software 4.x allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCto70562.
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.01328 · Published 2014-05-02 · No fix listed CWE-20
Priority LOW 37
The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCtq72699.
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.01328 · Published 2014-05-02 · No fix listed CWE-20
Priority LOW 37
The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCuj94651.
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.01328 · Published 2014-05-02 · No fix listed CWE-20
Priority LOW 37
The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCua64961.
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.01328 · Published 2014-05-02 · No fix listed CWE-20
Priority LOW 37
The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCud29566.
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.01328 · Published 2014-05-02 · No fix listed CWE-20
Priority LOW 33
Cisco TelePresence TC before 7.3.4 on Integrator C devices allows remote attackers to bypass authentication via vectors involving multiple request parameters, aka Bug ID CSCuv00604.
CVSS 2.0MEDIUM 6.4· Network · No auth · Interaction — · EPSS 0.02343 · Published 2015-07-15 · No fix listed CWE-284
Priority LOW 32
Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 do not properly restrict access to the serial port, which allows local users to gain privileges via unspecified commands, aka Bug ID CSCub67692.
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.00387 · Published 2014-05-02 · No fix listed CWE-264
Priority LOW 30
Open redirect vulnerability in the login page in Cisco TC Software before 6.3-26 and 7.x before 7.3.0 on Cisco TelePresence Collaboration Desk and Room Endpoints devices allows remote attackers to redirect users to arbit…
CVSS 2.0MEDIUM 5.8· Network · No auth · Interaction — · EPSS 0.01855 · Published 2015-04-15 · No fix listed CWE-601
Priority LOW 29
Buffer overflow in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows local users to gain privileges by leveraging improper handling of the u-boot compiler flag for internal executable files, a…
CVSS 2.0MEDIUM 6.6· Local · Low privileges · Interaction — · EPSS 0.00339 · Published 2014-05-02 · No fix listed CWE-119
Priority LOW 26
Cisco TelePresence endpoints running either CE or TC software contain a vulnerability that could allow an authenticated, local attacker to execute a local shell command injection.
CVSS 3.0MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00739 · Published 2016-11-19 · No fix listed CWE-78
Priority LOW 26
CRLF injection vulnerability in Cisco TelePresence TC 6.x before 6.3.4 and 7.x before 7.3.3 on Integrator C SX20 devices allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attack…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01739 · Published 2015-06-07 · No fix listed CWE-20
Priority LOW 23
Cross-site scripting (XSS) vulnerability in the login page in Cisco TC Software before 7.1.0 on Cisco TelePresence Collaboration Desk and Room Endpoints devices allows remote attackers to inject arbitrary web script or H…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01535 · Published 2015-04-15 · No fix listed CWE-79
Load more