CVE-2014-2173

Summary: CVE-2014-2173 affects Cisco TelePresence TC Software 4.x/5.x and TE Software 4.x/6.0, where access to the serial port is not properly restricted, enabling local users to gain privileges via unspecified commands (Bug CSCub67692). What’s affected (as stated): Cisco TelePresence TC and TE S...

CVE-2014-2165

Cisco TelePresence TC and TE Software (TC: 4.x/5.x; TE: 4.x and 6.0) are affected by multiple SIP-related DoS and code execution vulnerabilities. For CVE-2014-2165, a flaw in the SIP implementation can allow remote attackers to cause a device reload by sending crafted SIP packets. The Cisco advis...

CVE-2014-2163

CVE-2014-2163 affects Cisco TelePresence TC and TE Software (4.x and 5.x). The vulnerability lies in the SIP implementation, where crafted SIP packets can cause a denial-of-service resulting in a device reload. The issue is documented across multiple sources (Cisco advisory Cisco-SA-20140430-TCTE...

Multiple Vulnerabilities in Cisco TelePresence TC and TE Software

Cisco TelePresence TC and TE Software are affected by the following vulnerabilities: Six Session Initiation Protocol SIP denial of service vulnerabilities Cisco TelePresence TC and TE Software DNS Buffer Overflow Vulnerability Cisco TelePresence TC and TE Software Input Validation Vulnerability...

CVE-2013-3401

The CVE-2013-3401 issue affects the SIP implementation in Cisco TelePresence TC Software. It arises from errors in the SIP stack that allow an unauthenticated, remote attacker to cause unintended NOTIFY messages, potentially impacting the integrity of communications. Cisco’s advisory notes that e...

Cisco TC Software SIP Implementation Vulnerability

A vulnerability in the Session Initiation Protocol SIP implementation used in TC Software could allow an unauthenticated, remoteattacker to cause an endpoint to process unintended SIP NOTIFY messages. The vulnerability is due to errors in the SIP implementation. An attacker could exploit this...

CVE-2013-3379

The firewall subsystem in Cisco TelePresence TC Software before 4.2 does not properly implement rules that grant access to hosts, which allows remote attackers to obtain shell access with root privileges by leveraging connectivity to the management network, aka Bug ID CSCts37781...

CVE-2013-3377

Cisco TelePresence TC Software before 5.1.7 and TE Software before 4.1.3 allow remote attackers to cause a denial of service device reload via crafted SIP packets, aka Bug ID CSCue01743...

CVE-2013-3378

Cisco TelePresence TC Software before 6.1 and TE Software before 4.1.3 are affected by a denial-of-service vulnerability in SIP handling that can be triggered by specially crafted SIP packets, leading to a temporary device hang. The issue is documented as Bug CSCuf89557, with Cisco’s advisory cis...

CVE-2013-3379

CVE-2013-3379 affects Cisco TelePresence TC Software prior to 4.2, where the firewall subsystem inadequately enforces host-access rules. This can let an attacker on the management network obtain a root shell on the affected system by leveraging adjacent access. The core issue is an adjacent-root-...

CVE-2013-3379

The firewall subsystem in Cisco TelePresence TC Software before 4.2 does not properly implement rules that grant access to hosts, which allows remote attackers to obtain shell access with root privileges by leveraging connectivity to the management network, aka Bug ID CSCts37781...

CVE-2013-3377

CVE-2013-3377 affects Cisco TelePresence TC Software prior to 5.1.7 and TE Software prior to 4.1.3. The vulnerability allows remote attackers to cause a DoS (device reload) by sending crafted SIP packets (Bug ID CSCue01743). Cisco’s advisory (cisco-sa-20130619-tpc) confirms two SIP-related DoS vu...