Cisco TelePresence MCU Login Panel - Detect

Cisco TelePresence MCU login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Cisco TelePresence MCU login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cisco TelePresence MCU...

EUVD-2015-4280

Malware in sbrugna...

Cisco TelePresence MCU Fragmented Packets Reassembly RCE

According to the self-reported version, the remote Cisco TelePresence Multipoint Control Unit MCU device is affected by a buffer overflow condition that occurs when reassembling fragmented IPv4 and IPv6 packets due to improper size validation. An unauthenticated, remote attacker can exploit this...

CVE-2017-3792

A vulnerability in a proprietary device driver in the kernel of Cisco TelePresence Multipoint Control Unit MCU Software could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service DoS condition. The vulnerability is due to improper size validation when...

PT-2017-2022

Name of the Vulnerable Software and Affected Versions Cisco TelePresence MCU platforms versions 4.31.68 or later Description A vulnerability in the kernel of Cisco TelePresence Multipoint Control Unit MCU Software could allow an unauthenticated, remote attacker to execute arbitrary code or cause ...

Cisco Warns of Critical Flaw in Teleconferencing Gear

Cisco Systems is warning customers of a critical vulnerability affecting three of its TelePresence MCU platform models. The flaw could give attackers the ability to remotely execute code on impacted systems or create conditions favorable to a denial-of-service DoS attack. According to an advisory...

Cisco TelePresence MCU 4500 Device Cross-Site Request Forgery Vulnerability

The Cisco TelePresence MCU 4500 is a multimedia conferencing bridge product. A cross-site request forgery vulnerability exists in the Cisco TelePresence MCU 4500 device, which allows remote attackers to construct malicious URIs, trick users into parsing them, and can perform malicious actions in...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability on Cisco TelePresence MCU 4500 devices with software 4.51.55 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu90710...

CVE-2015-4257

Cross-site request forgery CSRF vulnerability on Cisco TelePresence MCU 4500 devices with software 4.51.55 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu90710...

CVE-2015-4257: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability on Cisco TelePresence MCU 4500 devices with software 4.51.55 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu90710...

PT-2015-1634

Name of the Vulnerable Software and Affected Versions Cisco TelePresence MCU 4500 version 4.51.55 Description The issue is related to a cross-site request forgery CSRF vulnerability, which allows remote attackers to hijack the authentication of arbitrary users. This can enable unauthorized access...

PT-2015-1302

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Advanced Media Gateway Series Software versions 1.11.40 and earlier Cisco TelePresence IP Gateway Series Software affected versions not specified Cisco TelePresence IP VCR Series Software versions 3.01.27 and earlier Cisco...

CVE-2015-0621: Undefined Security Weakness

Cisco TelePresence MCU devices with software 4.51.45 allow remote attackers to cause a denial of service device reload via an unspecified series of TCP packets, aka Bug ID CSCur50347...

PT-2015-4765

Name of the Vulnerable Software and Affected Versions Cisco TelePresence MCU devices version 4.51.45 Description The issue allows remote attackers to cause a denial of service, resulting in a device reload, via an unspecified series of TCP packets. Recommendations For Cisco TelePresence MCU devic...

CVE-2014-3397: Undefined Security Weakness

The network stack in Cisco TelePresence MCU Software before 4.32.30 allows remote attackers to cause a denial of service memory consumption via crafted TCP packets, aka Bug ID CSCtz35468...

PT-2014-5287

Name of the Vulnerable Software and Affected Versions Cisco TelePresence MCU Software versions prior to 4.32.30 Description The issue allows remote attackers to cause a denial of service, specifically memory consumption, by sending crafted TCP packets to the network stack. Recommendations For...

Cisco TelePresence MCU Series Devices Multiple Vulnerabilities in OpenSSL

The remote Cisco TelePresence MCU device is running a software version known to be affected by multiple OpenSSL related vulnerabilities : - An error exists related to the implementation of the Elliptic Curve Digital Signature Algorithm ECDSA that could allow nonce disclosure via the 'FLUSH+RELOAD...

Cisco TelePresence Multipoint Control Unit Detection

Nessus determined that the remote host is a multipoint control unit video teleconferencing device. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid69046; scriptversion"1.7"; scriptsetattributeattribute:"pluginmodificationdate", value:"2020/09/22"; scriptxrefname:"IAVT...

Design/Logic Flaw

The DSP card on Cisco TelePresence MCU 4500 and 4501 devices before 4.32.30, TelePresence MCU MSE 8510 devices before 4.32.30, and TelePresence Server before 2.31.55 does not properly validate H.264 data, which allows remote attackers to cause a denial of service device reload via crafted RTP...

CVE-2013-1176: Improper Input Validation

The DSP card on Cisco TelePresence MCU 4500 and 4501 devices before 4.32.30, TelePresence MCU MSE 8510 devices before 4.32.30, and TelePresence Server before 2.31.55 does not properly validate H.264 data, which allows remote attackers to cause a denial of service device reload via crafted RTP...