5047 matches found
Command injection
Cisco TelePresence TC Software 4.x through 6.x before 6.2.0 and TE Software 4.x and 6.0 allow remote authenticated users to execute arbitrary commands by using the commands as arguments to internal system scripts, aka Bug ID CSCue60211...
Code injection
The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to cause a denial of service device reload via crafted SIP packets, aka Bug ID CSCua86589...
CVE-2014-2172
CVE-2014-2172 concerns a local-privilege-escalation vulnerability in Cisco TelePresence TC/TE Software. The issue is a buffer overflow in internal executables tied to the universal bootloader (u-boot) compiler flag handling, exploitable by a local attacker to gain privileges. Affected products in...
CVE-2014-2173
Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 do not properly restrict access to the serial port, which allows local users to gain privileges via unspecified commands, aka Bug ID CSCub67692...
CVE-2014-2170
CVE-2014-2170 affects Cisco TelePresence TC Software 4.x/5.x (and TE Software 4.x/6.0) prior to the patched versions 5.1.7 and 6.0.1, respectively. The vulnerability is a command injection via tshell (tcsh) scripts that could allow remote authenticated users to execute arbitrary commands. The iss...
CVE-2014-2161
The CVE-2014-2161 issue affects Cisco TelePresence System MXP Series Software prior to F9.3.1, where a flaw in the H.225 subsystem allows remote attackers to trigger a device reload via crafted packets (DoS). The related Cisco advisory notes multiple SIP/H.225 DoS flaws and confirms that Cisco ha...
CVE-2014-2157
Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service device reload via crafted SIP packets, aka Bug ID CSCty45733...
CVE-2014-2161
The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service device reload via crafted packets, aka Bug ID CSCty45731...
CVE-2014-2172
Buffer overflow in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows local users to gain privileges by leveraging improper handling of the u-boot compiler flag for internal executable files, aka Bug ID CSCub67693...
CVE-2014-2169
Cisco TelePresence TC Software 4.x through 6.x before 6.2.0 and TE Software 4.x and 6.0 allow remote authenticated users to execute arbitrary commands by using the commands as arguments to internal system scripts, aka Bug ID CSCue60211...
CVE-2014-2162
The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to cause a denial of service device reload via crafted SIP packets, aka Bug ID CSCud29566...
CVE-2014-2173
Summary: CVE-2014-2173 affects Cisco TelePresence TC Software 4.x/5.x and TE Software 4.x/6.0, where access to the serial port is not properly restricted, enabling local users to gain privileges via unspecified commands (Bug CSCub67692). What’s affected (as stated): Cisco TelePresence TC and TE S...
CVE-2014-2170
Cisco TelePresence TC Software 4.x and 5.x before 5.1.7 and 6.x before 6.0.1 and TE Software 4.x and 6.0 allow remote authenticated users to execute arbitrary commands by using the commands as arguments to tshell aka tcsh scripts, aka Bug ID CSCue60202...
CVE-2014-2175
Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allow remote attackers to cause a denial of service memory consumption via crafted H.225 packets, aka Bug ID CSCtq78849...
CVE-2014-2160
CVE-2014-2160 affects Cisco TelePresence System MXP Series Software prior to F9.3.1, where the H.225 subsystem can be abused by crafted packets to cause a device reload (DoS). The issue originates in the H.225 handling and results in complete availability impact. Cisco’s advisory recommends upgra...
CVE-2014-2167
The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to cause a denial of service device reload via crafted SIP packets, aka Bug ID CSCua86589...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the web framework in Cisco WebEx Meetings Server allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuj81777...
CVE-2014-2186
Cross-site request forgery CSRF vulnerability in the web framework in Cisco WebEx Meetings Server allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuj81777...
CVE-2014-2185
The Call Detail Records CDR Management component in Cisco Unified Communications Manager Unified CM allows remote authenticated users to obtain sensitive information by reading extraneous fields in an HTML document, aka Bug ID CSCun74374...