EUVD-2013-5333

Malware in sbrugna...

EUVD-2015-4209

Malware in sbrugna...

Cisco Virtualization Experience Client Input Validation Elevation of Privilege Vulnerability

Cisco Virtualization Experience Client is a thin client for integrated virtualization infrastructure from Cisco USA. An input validation vulnerability in the subsystem that manages the WEB interface, included in firmware version 11.2 27.4 of the Cisco Virtualization Experience Client 6000 series,...

PT-2015-1326

Name of the Vulnerable Software and Affected Versions Cisco Virtualization Experience VXC Client 6215 version 11.227.4 Description The diagnostics subsystem in the administrative web interface allows local users to gain privileges for OS command execution via a crafted option value. This issue...

CVE-2015-4186: Improper Neutralization of Special Elements used in an OS Command

The diagnostics subsystem in the administrative web interface on Cisco Virtualization Experience aka VXC Client 6215 devices with firmware 11.227.4 allows local users to gain privileges for OS command execution via a crafted option value, aka Bug ID CSCug54412...

PT-2013-5577

Name of the Vulnerable Software and Affected Versions Cisco Virtualization Experience Client 6000 devices affected versions not specified Description The issue concerns the diagnostic module in the firmware of the affected devices, allowing local users to bypass access restrictions and execute...

CVE-2013-5493: Improper Input Validation

The diagnostic module in the firmware on Cisco Virtualization Experience Client 6000 devices allows local users to bypass intended access restrictions and execute arbitrary commands via unspecified vectors, aka Bug ID CSCug68407...

PT-2013-4365

Name of the Vulnerable Software and Affected Versions Cisco Virtualization Experience Client 6000 affected versions not specified Description The issue concerns incorrect operating-system permissions set by the firmware, allowing local users to gain privileges through a specific sequence of...

CVE-2013-3408: Undefined Security Weakness

The firmware on Cisco Virtualization Experience Client 6000 devices sets incorrect operating-system permissions, which allows local users to gain privileges via an unspecified sequence of commands, aka Bug ID CSCuc31764...

Design/Logic Flaw

The Precision Video Engine component in Cisco Jabber for Windows and Cisco Virtualization Experience Media Engine allows remote attackers to cause a denial of service process crash and call disconnection via crafted RTP packets, aka Bug IDs CSCuh60706 and CSCue21117...

PT-2013-4350

Name of the Vulnerable Software and Affected Versions Cisco Jabber for Windows affected versions not specified Cisco Virtualization Experience Media Engine affected versions not specified Description The issue allows remote attackers to cause a denial of service, resulting in a process crash and...

CVE-2013-3393: Improper Input Validation

The Precision Video Engine component in Cisco Jabber for Windows and Cisco Virtualization Experience Media Engine allows remote attackers to cause a denial of service process crash and call disconnection via crafted RTP packets, aka Bug IDs CSCuh60706 and CSCue21117...