CVE-2013-3401

The CVE-2013-3401 issue affects the SIP implementation in Cisco TelePresence TC Software. It arises from errors in the SIP stack that allow an unauthenticated, remote attacker to cause unintended NOTIFY messages, potentially impacting the integrity of communications. Cisco’s advisory notes that e...

CVE-2013-3401: Undefined Security Weakness

The SIP implementation in Cisco TelePresence TC Software allows remote attackers to trigger unintended use of NOTIFY messages via unspecified vectors, aka Bug ID CSCud96080...

Cisco TC Software SIP Implementation Vulnerability

A vulnerability in the Session Initiation Protocol SIP implementation used in TC Software could allow an unauthenticated, remoteattacker to cause an endpoint to process unintended SIP NOTIFY messages. The vulnerability is due to errors in the SIP implementation. An attacker could exploit this...

CVE-2013-3379

The firewall subsystem in Cisco TelePresence TC Software before 4.2 does not properly implement rules that grant access to hosts, which allows remote attackers to obtain shell access with root privileges by leveraging connectivity to the management network, aka Bug ID CSCts37781...

CVE-2013-3377

Cisco TelePresence TC Software before 5.1.7 and TE Software before 4.1.3 allow remote attackers to cause a denial of service device reload via crafted SIP packets, aka Bug ID CSCue01743...

CVE-2013-3378

Cisco TelePresence TC Software before 6.1 and TE Software before 4.1.3 are affected by a denial-of-service vulnerability in SIP handling that can be triggered by specially crafted SIP packets, leading to a temporary device hang. The issue is documented as Bug CSCuf89557, with Cisco’s advisory cis...

CVE-2013-3379

CVE-2013-3379 affects Cisco TelePresence TC Software prior to 4.2, where the firewall subsystem inadequately enforces host-access rules. This can let an attacker on the management network obtain a root shell on the affected system by leveraging adjacent access. The core issue is an adjacent-root-...

CVE-2013-3379

The firewall subsystem in Cisco TelePresence TC Software before 4.2 does not properly implement rules that grant access to hosts, which allows remote attackers to obtain shell access with root privileges by leveraging connectivity to the management network, aka Bug ID CSCts37781...

CVE-2013-3377

CVE-2013-3377 affects Cisco TelePresence TC Software prior to 5.1.7 and TE Software prior to 4.1.3. The vulnerability allows remote attackers to cause a DoS (device reload) by sending crafted SIP packets (Bug ID CSCue01743). Cisco’s advisory (cisco-sa-20130619-tpc) confirms two SIP-related DoS vu...

CVE-2013-3377: Undefined Security Weakness

Cisco TelePresence TC Software before 5.1.7 and TE Software before 4.1.3 allow remote attackers to cause a denial of service device reload via crafted SIP packets, aka Bug ID CSCue01743...

CVE-2013-3378: Improper Input Validation

Cisco TelePresence TC Software before 6.1 and TE Software before 4.1.3 allow remote attackers to cause a denial of service temporary device hang via crafted SIP packets, aka Bug ID CSCuf89557...

CVE-2013-3379: Undefined Security Weakness

The firewall subsystem in Cisco TelePresence TC Software before 4.2 does not properly implement rules that grant access to hosts, which allows remote attackers to obtain shell access with root privileges by leveraging connectivity to the management network, aka Bug ID CSCts37781...