Read the docs
TI-2014-00631 Aliases CVE-2014-0661GHSA-7g4g-9h43-3xvc

The System Status Collection Daemon (SSCD) in Cisco TelePresence System 500-37, 1000…

Priority MEDIUM 40CWE-94Published · Updated

Key facts

Attack vector
Adjacent network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
Complete · Complete · Complete
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-94.

Summary

The System Status Collection Daemon (SSCD) in Cisco TelePresence System 500-37, 1000, 1300-65, and 3xxx before 1.10.2(42), and 500-32, 1300-47, TX1310 65, and TX9xxx before 6.0.4(11), allows remote attackers to execute arbitrary commands or cause a denial of service (stack memory corruption) via a crafted XML-RPC message, aka Bug ID CSCui32796.

Why it matters now

EPSS 0.02303 83rd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 39

CPEVersionsRoleVendor
cpe:2.3:a:cisco:telepresence_system_software:*:*:*:*:*:*:*:*up to 1.10.1\(43\)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.5.10\(3648\):*:*:*:*:*:*:*1.5.10(3648)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.7.5\(42\):*:*:*:*:*:*:*1.7.5(42)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.7.6\(4\):*:*:*:*:*:*:*1.7.6(4)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.8.0\(55\):*:*:*:*:*:*:*1.8.0(55)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.8.1\(34\):*:*:*:*:*:*:*1.8.1(34)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.8.2\(11\):*:*:*:*:*:*:*1.8.2(11)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.8.3\(4\):*:*:*:*:*:*:*1.8.3(4)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.8.4\(13\):*:*:*:*:*:*:*1.8.4(13)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.8.5\(4\):*:*:*:*:*:*:*1.8.5(4)VulnerableCisco
  • cpe:2.3:a:cisco:telepresence_system_software:*:*:*:*:*:*:*:* Versions up to 1.10.1\(43\) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.5.10\(3648\):*:*:*:*:*:*:* Versions 1.5.10(3648) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.7.5\(42\):*:*:*:*:*:*:* Versions 1.7.5(42) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.7.6\(4\):*:*:*:*:*:*:* Versions 1.7.6(4) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.8.0\(55\):*:*:*:*:*:*:* Versions 1.8.0(55) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.8.1\(34\):*:*:*:*:*:*:* Versions 1.8.1(34) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.8.2\(11\):*:*:*:*:*:*:* Versions 1.8.2(11) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.8.3\(4\):*:*:*:*:*:*:* Versions 1.8.3(4) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.8.4\(13\):*:*:*:*:*:*:* Versions 1.8.4(13) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.8.5\(4\):*:*:*:*:*:*:* Versions 1.8.5(4) Vulnerable ·Cisco
Show 29 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:cisco:telepresence_system_software:1.9.0\(46\):*:*:*:*:*:*:*1.9.0(46)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.9.1\(68\):*:*:*:*:*:*:*1.9.1(68)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.9.2\(19\):*:*:*:*:*:*:*1.9.2(19)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.9.3\(44\):*:*:*:*:*:*:*1.9.3(44)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.9.4\(19\):*:*:*:*:*:*:*1.9.4(19)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.9.5\(7\):*:*:*:*:*:*:*1.9.5(7)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.9.6\(2\):*:*:*:*:*:*:*1.9.6(2)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.9.6.1\(3\):*:*:*:*:*:*:*1.9.6.1(3)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.10.0:*:*:*:*:*:*:*1.10.0VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.10.0\(259\):*:*:*:*:*:*:*1.10.0(259)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.10.1:*:*:*:*:*:*:*1.10.1VulnerableCisco
cpe:2.3:h:cisco:telepresence_system_1000:-:*:*:*:*:*:*:*not specified by NVDVulnerableCisco
cpe:2.3:h:cisco:telepresence_system_1300-65:-:*:*:*:*:*:*:*not specified by NVDVulnerableCisco
cpe:2.3:h:cisco:telepresence_system_3000:*:*:*:*:*:*:*:*all versionsVulnerableCisco
cpe:2.3:h:cisco:telepresence_system_3010:*:*:*:*:*:*:*:*all versionsVulnerableCisco
cpe:2.3:h:cisco:telepresence_system_3200:*:*:*:*:*:*:*:*all versionsVulnerableCisco
cpe:2.3:h:cisco:telepresence_system_3210:*:*:*:*:*:*:*:*all versionsVulnerableCisco
cpe:2.3:h:cisco:telepresence_system_500-37:-:*:*:*:*:*:*:*not specified by NVDVulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:*:*:*:*:*:*:*:*up to 6.0.3\(33\)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:6.0.0.1\(4\):*:*:*:*:*:*:*6.0.0.1(4)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:6.0.1\(50\):*:*:*:*:*:*:*6.0.1(50)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:6.0.2\(28\):*:*:*:*:*:*:*6.0.2(28)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:6.1.0\(90\):*:*:*:*:*:*:*6.1.0(90)VulnerableCisco
cpe:2.3:h:cisco:telepresence_system_1100:-:*:*:*:*:*:*:*not specified by NVDVulnerableCisco
cpe:2.3:h:cisco:telepresence_system_500-32:-:*:*:*:*:*:*:*not specified by NVDVulnerableCisco
cpe:2.3:h:cisco:telepresence_system_tx1300_47:*:*:*:*:*:*:*:*all versionsVulnerableCisco
cpe:2.3:h:cisco:telepresence_system_tx1310_65:*:*:*:*:*:*:*:*all versionsVulnerableCisco
cpe:2.3:h:cisco:telepresence_system_tx9000:*:*:*:*:*:*:*:*all versionsVulnerableCisco
cpe:2.3:h:cisco:telepresence_system_tx9200:*:*:*:*:*:*:*:*all versionsVulnerableCisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.9.0\(46\):*:*:*:*:*:*:* Versions 1.9.0(46) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.9.1\(68\):*:*:*:*:*:*:* Versions 1.9.1(68) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.9.2\(19\):*:*:*:*:*:*:* Versions 1.9.2(19) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.9.3\(44\):*:*:*:*:*:*:* Versions 1.9.3(44) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.9.4\(19\):*:*:*:*:*:*:* Versions 1.9.4(19) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.9.5\(7\):*:*:*:*:*:*:* Versions 1.9.5(7) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.9.6\(2\):*:*:*:*:*:*:* Versions 1.9.6(2) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.9.6.1\(3\):*:*:*:*:*:*:* Versions 1.9.6.1(3) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.10.0:*:*:*:*:*:*:* Versions 1.10.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.10.0\(259\):*:*:*:*:*:*:* Versions 1.10.0(259) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.10.1:*:*:*:*:*:*:* Versions 1.10.1 Vulnerable ·Cisco
  • cpe:2.3:h:cisco:telepresence_system_1000:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Cisco
  • cpe:2.3:h:cisco:telepresence_system_1300-65:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Cisco
  • cpe:2.3:h:cisco:telepresence_system_3000:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Cisco
  • cpe:2.3:h:cisco:telepresence_system_3010:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Cisco
  • cpe:2.3:h:cisco:telepresence_system_3200:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Cisco
  • cpe:2.3:h:cisco:telepresence_system_3210:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Cisco
  • cpe:2.3:h:cisco:telepresence_system_500-37:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:*:*:*:*:*:*:*:* Versions up to 6.0.3\(33\) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:6.0.0.1\(4\):*:*:*:*:*:*:* Versions 6.0.0.1(4) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:6.0.1\(50\):*:*:*:*:*:*:* Versions 6.0.1(50) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:6.0.2\(28\):*:*:*:*:*:*:* Versions 6.0.2(28) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:6.1.0\(90\):*:*:*:*:*:*:* Versions 6.1.0(90) Vulnerable ·Cisco
  • cpe:2.3:h:cisco:telepresence_system_1100:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Cisco
  • cpe:2.3:h:cisco:telepresence_system_500-32:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Cisco
  • cpe:2.3:h:cisco:telepresence_system_tx1300_47:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Cisco
  • cpe:2.3:h:cisco:telepresence_system_tx1310_65:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Cisco
  • cpe:2.3:h:cisco:telepresence_system_tx9000:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Cisco
  • cpe:2.3:h:cisco:telepresence_system_tx9200:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Cisco

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2014-0661
  2. 2026-10-03 Alias added: GHSA-7g4g-9h43-3xvc

References

Advisory 1

Other 1

  • TI-2011-00308 The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through… CVSS 2.0HIGH 10.0
  • TI-2011-00312 The TFTP implementation on Cisco TelePresence endpoint devices with software 1.2.x… CVSS 2.0HIGH 10.0
  • TI-2011-00311 The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through… CVSS 2.0HIGH 9.0
  • TI-2011-00310 The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through… CVSS 2.0HIGH 9.0
  • TI-2011-00309 The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through… CVSS 2.0HIGH 9.0
  • TI-2011-00315 Buffer overflow on Cisco Adaptive Security Appliances (ASA) 5500 series devices with… CVSS 2.0HIGH 7.9
See all 8 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences