Cisco TelePresence Codec and Collaboration Endpoint Software Authentication Bypass Vulnerability

Cisco TelePresence is the United States Cisco Cisco company's set of video conferencing solutions known as "telepresence" system. TelePresence Codec TC and Collaboration Endpoint CE software are two of the endpoint software. Software are two of the endpoint software. An authentication bypass...

CVE-2016-1387

The XML API in TelePresence Codec TC 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.3.2, 7.3.3, 7.3.4, and 7.3.5 and Collaboration Endpoint CE 8.0.0, 8.0.1, and 8.1.0 in Cisco TelePresence Software mishandles authentication, which allows remote attackers to execute control commands or make configuration changes v...

CVE-2016-1387

The XML API in TelePresence Codec TC 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.3.2, 7.3.3, 7.3.4, and 7.3.5 and Collaboration Endpoint CE 8.0.0, 8.0.1, and 8.1.0 in Cisco TelePresence Software mishandles authentication, which allows remote attackers to execute control commands or make configuration changes v...

Command injection

The XML API in TelePresence Codec TC 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.3.2, 7.3.3, 7.3.4, and 7.3.5 and Collaboration Endpoint CE 8.0.0, 8.0.1, and 8.1.0 in Cisco TelePresence Software mishandles authentication, which allows remote attackers to execute control commands or make configuration changes v...

CVE-2016-1387

The XML API in TelePresence Codec TC 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.3.2, 7.3.3, 7.3.4, and 7.3.5 and Collaboration Endpoint CE 8.0.0, 8.0.1, and 8.1.0 in Cisco TelePresence Software mishandles authentication, which allows remote attackers to execute control commands or make configuration changes v...

CVE-2016-1387

Cisco TelePresence TC (Codec) 7.2.x–7.3.x and CE (Collaboration Endpoint) 8.0.x–8.1.x are affected by an authentication bypass in the XML API due to improper authentication implementation. An unauthenticated, remote attacker can bypass XML API authentication and perform configuration changes or i...

Cisco Issues Critical Security Warning Tied to TelePresence Hardware

Cisco Systems said it has patched a critical flaw tied to its TelePresence hardware that allowed unauthorized third-parties to access the system via an API bug. The networking behemoth also alerted customers to a duo of denial of service attack vulnerabilities that represent a high risk for its...

Cisco TelePresence XML Application Programming Interface Authentication Bypass Vulnerability

A vulnerability in the XML application programming interface API of Cisco TelePresence Codec TC and Collaboration Endpoint CE Software could allow an unauthenticated, remote attacker to bypass authentication and access a targeted system through the API. The vulnerability is due to improper...

Cisco Releases Security Updates

Cisco has released security updates to address vulnerabilities in multiple products. Exploitation of one of these vulnerabilities could allow a remote attacker to take control of an affected system. US-CERT encourages users and administrators to review the following Cisco Security Advisories and...

The vulnerability of the microprogramming software of the Cisco TelePresence Server allows a intruder to trigger a service failure.

The vulnerability of the microprogramming software of the Cisco TelePresence Server control device is caused by buffer overflow. Exploiting this vulnerability allows a malicious actor to trigger a service failure device reboot by sending modified STUN packets remotely...

The vulnerability of the microprogramming software of the Cisco TelePresence Server allows a intruder to trigger a service failure.

The vulnerability of the kernel of microprogramming software in Cisco TelePresence Server devices is related to resource management errors. Exploiting this vulnerability could allow a malicious actor to cause service failures by sending specially crafted IPv6 packets...

The vulnerability of the microprogramming software of the Cisco TelePresence Server allows a intruder to trigger a service failure.

The vulnerability of the microprogramming software of the Cisco TelePresence Server device is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service failures such as memory consumption or device restarting through a specially crafted HTTP...

Cisco TelePresence Server Malformed STUN Packet Processing Denial of Service Vulnerability

A vulnerability in Cisco TelePresence Server devices running software version 3.1 could allow an unauthenticated, remote attacker to reload the device. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Cisco TelePresence Server Malformed STUN Packet Processing DoS (cisco-sa-20160406-cts2)

According to its self-reported version, the Cisco TelePresence Server running on the remote host is affected by a denial of service vulnerability due to improper processing of malformed Session Traversal Utilities for NAT STUN packets. An unauthenticated, remote attacker can exploit this, via...

Cisco TelePresence Server HTTP Parsing Engine DoS (cisco-sa-20160406-cts1)

According to its self-reported version, the Cisco TelePresence Server running on the remote host is affected by a denial of service vulnerability in the HTTP parsing engine due to improper handling of specially crafted URLs. An unauthenticated, remote attacker can exploit this, via multiple URL...

Cisco TelePresence Server Crafted IPv6 Packet Handling DoS (cisco-sa-20160406-cts)

According to its self-reported version, the Cisco TelePresence Server running on the remote host is affected by a denial of service vulnerability due to improper handling of a specially crafted stream of IPv6 packets. An unauthenticated, remote attacker can exploit this, via a specially crafted...

Cisco TelePresence Server Denial of Service Vulnerability

Cisco TelePresence is a Cisco TelePresence solution. Cisco TelePresence Server version 3.1 fails to properly handle malformed STUN packets, which can allow an unauthenticated remote attacker to cause the affected device to reload...

Cisco Mobility Services Engine TelePresence Server Denial of Service Vulnerability

Cisco TelePresence Server on Mobility Services Engine MSE is the United States Cisco Cisco a set of video conferencing solutions running on the platform that provides Wi-Fi services Mobility Services Engine Cisco MSE. A security vulnerability exists in the kernel in Cisco TelePresence Server...

Cisco TelePresence Server Denial of Service Vulnerability (CNVD-2016-02065)

Cisco TelePresence is a Cisco TelePresence solution. Cisco TelePresence Server versions 4.12.29-4.24.17 HTTP parsing engine fails to properly handle constructed URLs, which can allow an unauthenticated, remote attacker to cause reloading of the affected device...

CVE-2016-1346

The kernel in Cisco TelePresence Server 3.0 through 4.24.18 on Mobility Services Engine MSE 8710 devices allows remote attackers to cause a denial of service panic and reboot via a crafted sequence of IPv6 packets, aka Bug ID CSCuu46673...