Design/Logic Flaw

The image-upgrade implementation on Cisco Desktop Collaboration Experience aka Collaboration Desk Experience or DX DX650 endpoints allows local users to execute arbitrary OS commands via an unspecified parameter, aka Bug ID CSCus38947...

CVE-2015-0584

Cisco DX650 (Desktop Collaboration Experience) endpoints are affected by a local command-injection vulnerability in the image-upgrade feature. The root cause is insufficient input sanitization during the image upgrade process, allowing an authenticated, local attacker to execute arbitrary OS comm...

PT-2015-4730

Name of the Vulnerable Software and Affected Versions Cisco Desktop Collaboration Experience DX DX650 affected versions not specified Description The issue concerns the image-upgrade implementation, allowing local users to execute arbitrary OS commands via an unspecified parameter. Recommendation...

CVE-2015-0584: Improper Input Validation

The image-upgrade implementation on Cisco Desktop Collaboration Experience aka Collaboration Desk Experience or DX DX650 endpoints allows local users to execute arbitrary OS commands via an unspecified parameter, aka Bug ID CSCus38947...

PT-2013-4356

Name of the Vulnerable Software and Affected Versions Cisco Desktop Collaboration Experience DX650 affected versions not specified Description The issue is related to a buffer overflow in an unspecified Android API, which allows attackers to execute arbitrary code. This is due to incorrect memory...

CVE-2013-3399: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in an unspecified Android API on the Cisco Desktop Collaboration Experience DX650 allows attackers to execute arbitrary code via vectors that leverage incorrect memory allocation, aka Bug IDs CSCuf93957, CSCug22352, and CSCug22462...

Cisco Desktop Collaboration Experience DX600 Series Potential Code Injection Vulnerability

A vulnerability in an underlying Android Application Programming Interface API utilized by the Cisco Desktop Collaboration Experience DX600 series endpoint could allow an authenticated, local attacker to inject code into the system. The vulnerability is due to insufficient validation of specific...