CVE-2014-2169

Cisco TelePresence TC/TE Software 4.x–6.x (before 6.2.0 for TC and 6.0 for TE) is affected by CVE-2014-2169: remote authenticated users can execute arbitrary commands by passing commands as arguments to internal system scripts (CSCue60211). The vulnerability is exposed in how user-supplied input ...