Priority MEDIUM 40
The System Status Collection Daemon (SSCD) in Cisco TelePresence System 500-37, 1000, 1300-65, and 3xxx before 1.10.2(42), and 500-32, 1300-47, TX1310 65, and TX9xxx before 6.0.4(11), allows remote attackers to execute a…
CVSS 2.0HIGH 8.3· Adjacent network · No auth · Interaction — · EPSS 0.02303 · Published 2014-01-22 · No fix listed CWE-94
Priority LOW 39
Buffer overflow on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 1.6.x; Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x; Cisco TelePresence en…
CVSS 2.0HIGH 7.9· Adjacent network · No auth · Interaction — · EPSS 0.0215 · Published 2011-02-25 · No fix listed CWE-119
Priority LOW 39
The XML-RPC implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote attackers to execute arbitrary commands via a TCP request, related to a "command injection vulnerability,"…
CVSS 2.0HIGH 8.3· Adjacent network · No auth · Interaction — · EPSS 0.01382 · Published 2011-02-25 · No fix listed CWE-78
Priority LOW 39
Cisco TelePresence endpoint devices with software 1.2.x through 1.6.x allow remote attackers to cause a denial of service (service crash) via a malformed SOAP request in conjunction with a spoofed TelePresence Manager th…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.02542 · Published 2011-02-25 · No fix listed CWE-399
Priority MEDIUM 48
The TFTP implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x, 1.6.0, and 1.6.1 allows remote attackers to obtain sensitive information via a GET request, aka Bug ID CSCte43876.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.02631 · Published 2011-02-25 · No fix listed CWE-200
Priority MEDIUM 44
The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.6.x allows remote authenticated users to execute arbitrary commands via a malformed request, related to "command injection vulne…
CVSS 2.0HIGH 9.0· Network · Low privileges · Interaction — · EPSS 0.02795 · Published 2011-02-25 · No fix listed CWE-78
Priority MEDIUM 44
The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote authenticated users to execute arbitrary commands via a malformed request, related to "command injection vulne…
CVSS 2.0HIGH 9.0· Network · Low privileges · Interaction — · EPSS 0.02795 · Published 2011-02-25 · No fix listed CWE-78
Priority MEDIUM 44
The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote authenticated users to execute arbitrary commands via a malformed request, related to "command injection vulne…
CVSS 2.0HIGH 9.0· Network · Low privileges · Interaction — · EPSS 0.02795 · Published 2011-02-25 · No fix listed CWE-78
Priority MEDIUM 49
The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote attackers to execute arbitrary commands via a malformed request, related to "command injection vulnerabilities…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.03346 · Published 2011-02-25 · No fix listed CWE-78