Read the docs
TI-2014-02610 Aliases CVE-2014-3274GHSA-5r36-q7mm-42xf

Cisco TelePresence System (CTS) 6.0(.5)(5) and earlier falls back to HTTP when certain…

Priority LOW 22CWE-310Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
—
Confidentiality · integrity · availability
Partial · None · None
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

Cisco TelePresence System (CTS) 6.0(.5)(5) and earlier falls back to HTTP when certain HTTPS sessions cannot be established, which allows man-in-the-middle attackers to obtain sensitive directory information by leveraging a network position between CTS and Cisco Unified Communications Manager (UCM) to block HTTPS traffic, aka Bug ID CSCuj26326.

Why it matters now

EPSS 0.01129 66th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 58

CPEVersionsRoleVendor
cpe:2.3:a:cisco:telepresence_system_software:*:*:*:*:*:*:*:*up to 6.0.5\(5\)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.2.3\(1101\):*:*:*:*:*:*:*1.2.3(1101)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.3.2\(1393\):*:*:*:*:*:*:*1.3.2(1393)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.4.7\(2229\):*:*:*:*:*:*:*1.4.7(2229)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.5.1\(2082\):*:*:*:*:*:*:*1.5.1(2082)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.5.3\(2115\):*:*:*:*:*:*:*1.5.3(2115)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.5.10\(3648\):*:*:*:*:*:*:*1.5.10(3648)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.5.11\(3659\):*:*:*:*:*:*:*1.5.11(3659)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.5.12\(3701\):*:*:*:*:*:*:*1.5.12(3701)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.5.13\(3717\):*:*:*:*:*:*:*1.5.13(3717)VulnerableCisco
  • cpe:2.3:a:cisco:telepresence_system_software:*:*:*:*:*:*:*:* Versions up to 6.0.5\(5\) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.2.3\(1101\):*:*:*:*:*:*:* Versions 1.2.3(1101) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.3.2\(1393\):*:*:*:*:*:*:* Versions 1.3.2(1393) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.4.7\(2229\):*:*:*:*:*:*:* Versions 1.4.7(2229) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.5.1\(2082\):*:*:*:*:*:*:* Versions 1.5.1(2082) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.5.3\(2115\):*:*:*:*:*:*:* Versions 1.5.3(2115) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.5.10\(3648\):*:*:*:*:*:*:* Versions 1.5.10(3648) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.5.11\(3659\):*:*:*:*:*:*:* Versions 1.5.11(3659) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.5.12\(3701\):*:*:*:*:*:*:* Versions 1.5.12(3701) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.5.13\(3717\):*:*:*:*:*:*:* Versions 1.5.13(3717) Vulnerable ·Cisco
Show 48 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:cisco:telepresence_system_software:1.6.0\(3954\):*:*:*:*:*:*:*1.6.0(3954)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.6.2\(4023\):*:*:*:*:*:*:*1.6.2(4023)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.6.3\(4042\):*:*:*:*:*:*:*1.6.3(4042)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.6.4\(4072\):*:*:*:*:*:*:*1.6.4(4072)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.6.5\(4097\):*:*:*:*:*:*:*1.6.5(4097)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.6.6\(4109\):*:*:*:*:*:*:*1.6.6(4109)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.6.7\(4212\):*:*:*:*:*:*:*1.6.7(4212)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.6.8\(4222\):*:*:*:*:*:*:*1.6.8(4222)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.7.0.1\(4764\):*:*:*:*:*:*:*1.7.0.1(4764)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.7.0.2\(4719\):*:*:*:*:*:*:*1.7.0.2(4719)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.7.1\(4864\):*:*:*:*:*:*:*1.7.1(4864)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.7.2\(4937\):*:*:*:*:*:*:*1.7.2(4937)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.7.2.1\(2\):*:*:*:*:*:*:*1.7.2.1(2)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.7.4\(270\):*:*:*:*:*:*:*1.7.4(270)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.7.5\(42\):*:*:*:*:*:*:*1.7.5(42)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.7.6\(4\):*:*:*:*:*:*:*1.7.6(4)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.8.0\(55\):*:*:*:*:*:*:*1.8.0(55)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.8.1\(34\):*:*:*:*:*:*:*1.8.1(34)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.8.2\(11\):*:*:*:*:*:*:*1.8.2(11)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.8.3\(4\):*:*:*:*:*:*:*1.8.3(4)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.8.4\(13\):*:*:*:*:*:*:*1.8.4(13)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.8.5\(4\):*:*:*:*:*:*:*1.8.5(4)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.9.0\(46\):*:*:*:*:*:*:*1.9.0(46)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.9.0.1\(3\):*:*:*:*:*:*:*1.9.0.1(3)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.9.1\(68\):*:*:*:*:*:*:*1.9.1(68)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.9.2:*:*:*:*:*:*:*1.9.2VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.9.2\(19\):*:*:*:*:*:*:*1.9.2(19)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.9.3:*:*:*:*:*:*:*1.9.3VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.9.3\(44\):*:*:*:*:*:*:*1.9.3(44)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.9.4:*:*:*:*:*:*:*1.9.4VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.9.4\(19\):*:*:*:*:*:*:*1.9.4(19)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.9.5:*:*:*:*:*:*:*1.9.5VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.9.5\(7\):*:*:*:*:*:*:*1.9.5(7)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.9.6:*:*:*:*:*:*:*1.9.6VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.9.6\(2\):*:*:*:*:*:*:*1.9.6(2)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.9.6.1\(3\):*:*:*:*:*:*:*1.9.6.1(3)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.10.0:*:*:*:*:*:*:*1.10.0VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.10.0\(259\):*:*:*:*:*:*:*1.10.0(259)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.10.1:*:*:*:*:*:*:*1.10.1VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.10.1\(43\):*:*:*:*:*:*:*1.10.1(43)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.10.2\(42\):*:*:*:*:*:*:*1.10.2(42)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:1.10.3\(41\):*:*:*:*:*:*:*1.10.3(41)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:4.0.0:*:*:*:*:*:*:*4.0.0VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:6.0.0.1\(4\):*:*:*:*:*:*:*6.0.0.1(4)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:6.0.1\(50\):*:*:*:*:*:*:*6.0.1(50)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:6.0.2\(28\):*:*:*:*:*:*:*6.0.2(28)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:6.0.3\(33\):*:*:*:*:*:*:*6.0.3(33)VulnerableCisco
cpe:2.3:a:cisco:telepresence_system_software:6.0.4\(11\):*:*:*:*:*:*:*6.0.4(11)VulnerableCisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.6.0\(3954\):*:*:*:*:*:*:* Versions 1.6.0(3954) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.6.2\(4023\):*:*:*:*:*:*:* Versions 1.6.2(4023) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.6.3\(4042\):*:*:*:*:*:*:* Versions 1.6.3(4042) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.6.4\(4072\):*:*:*:*:*:*:* Versions 1.6.4(4072) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.6.5\(4097\):*:*:*:*:*:*:* Versions 1.6.5(4097) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.6.6\(4109\):*:*:*:*:*:*:* Versions 1.6.6(4109) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.6.7\(4212\):*:*:*:*:*:*:* Versions 1.6.7(4212) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.6.8\(4222\):*:*:*:*:*:*:* Versions 1.6.8(4222) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.7.0.1\(4764\):*:*:*:*:*:*:* Versions 1.7.0.1(4764) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.7.0.2\(4719\):*:*:*:*:*:*:* Versions 1.7.0.2(4719) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.7.1\(4864\):*:*:*:*:*:*:* Versions 1.7.1(4864) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.7.2\(4937\):*:*:*:*:*:*:* Versions 1.7.2(4937) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.7.2.1\(2\):*:*:*:*:*:*:* Versions 1.7.2.1(2) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.7.4\(270\):*:*:*:*:*:*:* Versions 1.7.4(270) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.7.5\(42\):*:*:*:*:*:*:* Versions 1.7.5(42) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.7.6\(4\):*:*:*:*:*:*:* Versions 1.7.6(4) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.8.0\(55\):*:*:*:*:*:*:* Versions 1.8.0(55) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.8.1\(34\):*:*:*:*:*:*:* Versions 1.8.1(34) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.8.2\(11\):*:*:*:*:*:*:* Versions 1.8.2(11) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.8.3\(4\):*:*:*:*:*:*:* Versions 1.8.3(4) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.8.4\(13\):*:*:*:*:*:*:* Versions 1.8.4(13) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.8.5\(4\):*:*:*:*:*:*:* Versions 1.8.5(4) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.9.0\(46\):*:*:*:*:*:*:* Versions 1.9.0(46) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.9.0.1\(3\):*:*:*:*:*:*:* Versions 1.9.0.1(3) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.9.1\(68\):*:*:*:*:*:*:* Versions 1.9.1(68) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.9.2:*:*:*:*:*:*:* Versions 1.9.2 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.9.2\(19\):*:*:*:*:*:*:* Versions 1.9.2(19) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.9.3:*:*:*:*:*:*:* Versions 1.9.3 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.9.3\(44\):*:*:*:*:*:*:* Versions 1.9.3(44) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.9.4:*:*:*:*:*:*:* Versions 1.9.4 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.9.4\(19\):*:*:*:*:*:*:* Versions 1.9.4(19) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.9.5:*:*:*:*:*:*:* Versions 1.9.5 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.9.5\(7\):*:*:*:*:*:*:* Versions 1.9.5(7) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.9.6:*:*:*:*:*:*:* Versions 1.9.6 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.9.6\(2\):*:*:*:*:*:*:* Versions 1.9.6(2) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.9.6.1\(3\):*:*:*:*:*:*:* Versions 1.9.6.1(3) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.10.0:*:*:*:*:*:*:* Versions 1.10.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.10.0\(259\):*:*:*:*:*:*:* Versions 1.10.0(259) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.10.1:*:*:*:*:*:*:* Versions 1.10.1 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.10.1\(43\):*:*:*:*:*:*:* Versions 1.10.1(43) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.10.2\(42\):*:*:*:*:*:*:* Versions 1.10.2(42) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:1.10.3\(41\):*:*:*:*:*:*:* Versions 1.10.3(41) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:4.0.0:*:*:*:*:*:*:* Versions 4.0.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:6.0.0.1\(4\):*:*:*:*:*:*:* Versions 6.0.0.1(4) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:6.0.1\(50\):*:*:*:*:*:*:* Versions 6.0.1(50) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:6.0.2\(28\):*:*:*:*:*:*:* Versions 6.0.2(28) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:6.0.3\(33\):*:*:*:*:*:*:* Versions 6.0.3(33) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_system_software:6.0.4\(11\):*:*:*:*:*:*:* Versions 6.0.4(11) Vulnerable ·Cisco

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2014-3274
  2. 2026-10-03 Alias added: GHSA-5r36-q7mm-42xf

References

Advisory 2

  • TI-2011-00308 The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through… CVSS 2.0HIGH 10.0
  • TI-2011-00312 The TFTP implementation on Cisco TelePresence endpoint devices with software 1.2.x… CVSS 2.0HIGH 10.0
  • TI-2013-03016 Cisco TelePresence System Software 1.10.1 and earlier on 500, 13X0, 1X00, 30X0, and 3X00… CVSS 2.0HIGH 10.0
  • TI-2011-00311 The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through… CVSS 2.0HIGH 9.0
  • TI-2011-00310 The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through… CVSS 2.0HIGH 9.0
  • TI-2011-00309 The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through… CVSS 2.0HIGH 9.0
See all 24 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences