CVE-2015-4271: Improper Access Control

Cisco TelePresence TC before 7.3.4 on Integrator C devices allows remote attackers to bypass authentication via vectors involving multiple request parameters, aka Bug ID CSCuv00604...

PT-2015-1953

Name of the Vulnerable Software and Affected Versions Cisco TelePresence TC versions prior to 7.3.4 Description The issue is related to inadequate access control in the Cisco TelePresence TC software, allowing remote attackers to bypass authentication through multiple request parameters...

Crlf injection

CRLF injection vulnerability in Cisco TelePresence TC 6.x before 6.3.4 and 7.x before 7.3.3 on Integrator C SX20 devices allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL, aka Bug ID CSCut79341...

CVE-2015-0770: Improper Input Validation

CRLF injection vulnerability in Cisco TelePresence TC 6.x before 6.3.4 and 7.x before 7.3.3 on Integrator C SX20 devices allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL, aka Bug ID CSCut79341...

PT-2015-1604

Name of the Vulnerable Software and Affected Versions Cisco TelePresence TC versions 6.x through 6.3.3 Cisco TelePresence TC versions 7.x through 7.3.2 Description The issue is related to a CRLF injection vulnerability that exists due to insufficient input validation. This allows remote attackers...

PT-2015-3702

Name of the Vulnerable Software and Affected Versions Cisco TelePresence T, TelePresence TE, and TelePresence TC versions prior to 7.1 Description The issue is related to improper access control implementation, allowing remote attackers to obtain root privileges by sending packets on the local...

CVE-2015-0722: Undefined Security Weakness

The network drivers in Cisco TelePresence T, Cisco TelePresence TE, and Cisco TelePresence TC before 7.3.2 allow remote attackers to cause a denial of service process restart or device reload via a flood of crafted IP packets, aka Bug ID CSCuj68952...

CVE-2014-2174: Improper Access Control

Cisco TelePresence T, TelePresence TE, and TelePresence TC before 7.1 do not properly implement access control, which allows remote attackers to obtain root privileges by sending packets on the local network and allows physically proximate attackers to obtain root privileges via unspecified...

PT-2015-1329

Name of the Vulnerable Software and Affected Versions Cisco TelePresence T versions prior to 7.3.2 Cisco TelePresence TE versions prior to 7.3.2 Cisco TelePresence TC versions prior to 7.3.2 Description The issue is related to errors in resource management in the network drivers of the affected...

Command injection

Cisco TelePresence TC Software 4.x through 6.x before 6.2.0 and TE Software 4.x and 6.0 allow remote authenticated users to execute arbitrary commands by using the commands as arguments to internal system scripts, aka Bug ID CSCue60211...

CVE-2014-2165

Cisco TelePresence TC and TE Software (TC: 4.x/5.x; TE: 4.x and 6.0) are affected by multiple SIP-related DoS and code execution vulnerabilities. For CVE-2014-2165, a flaw in the SIP implementation can allow remote attackers to cause a device reload by sending crafted SIP packets. The Cisco advis...

PT-2014-4520

Name of the Vulnerable Software and Affected Versions Cisco TelePresence TC Software versions 4.x through 5.x Cisco TelePresence TE Software versions 4.x through 6.0 Description The issue affects the SIP implementation, allowing remote attackers to cause a denial of service, resulting in a device...

PT-2014-4531

Name of the Vulnerable Software and Affected Versions Cisco TelePresence TC Software versions 4.x through 5.x Cisco TelePresence TE Software versions 4.x through 6.0 Description The issue allows local users to gain privileges via unspecified commands due to improper restriction of access to the...

PT-2014-4523

Name of the Vulnerable Software and Affected Versions Cisco TelePresence TC Software versions 4.x through 5.x Cisco TelePresence TE Software versions 4.x through 6.0 Description The issue allows remote attackers to cause a denial of service, resulting in a device reload, by sending crafted SIP...

PT-2014-4530

Name of the Vulnerable Software and Affected Versions Cisco TelePresence TC Software versions 4.x through 5.x Cisco TelePresence TE Software versions 4.x through 6.0 Description The issue is related to a buffer overflow that allows local users to gain privileges. This is due to the improper...

PT-2014-4529

Name of the Vulnerable Software and Affected Versions Cisco TelePresence TC Software versions 4.x through 6.x before 6.0.1 Cisco TelePresence TE Software versions 4.x and 6.0.x before 6.0.2 Description A heap-based buffer overflow issue allows remote attackers to execute arbitrary code via crafte...

PT-2014-4528

Name of the Vulnerable Software and Affected Versions Cisco TelePresence TC Software versions 4.x through 5.x before 5.1.7 Cisco TelePresence TC Software version 6.x before 6.0.1 Cisco TelePresence TE Software versions 4.x Cisco TelePresence TE Software version 6.0 Description The issue allows...

PT-2014-4525

Name of the Vulnerable Software and Affected Versions Cisco TelePresence TC Software versions 4.x through 5.x Cisco TelePresence TE Software versions 4.x through 6.0 Description The issue allows remote attackers to cause a denial of service, resulting in a device reload, by sending crafted SIP...

PT-2014-4524

Name of the Vulnerable Software and Affected Versions Cisco TelePresence TC Software versions 4.x Cisco TelePresence TE Software versions 4.x Description The issue allows remote attackers to cause a denial of service, resulting in a device reload, via crafted SIP packets. Recommendations For Cisc...

PT-2014-4521

Name of the Vulnerable Software and Affected Versions Cisco TelePresence TC Software versions 4.x through 5.x Cisco TelePresence TE Software version 4.x Description The issue allows remote attackers to cause a denial of service, resulting in a device reload, by sending crafted SIP packets...