CVE-2013-3378

Cisco TelePresence TC Software before 6.1 and TE Software before 4.1.3 are affected by a denial-of-service vulnerability in SIP handling that can be triggered by specially crafted SIP packets, leading to a temporary device hang. The issue is documented as Bug CSCuf89557, with Cisco’s advisory cis...

CVE-2013-3379

CVE-2013-3379 affects Cisco TelePresence TC Software prior to 4.2, where the firewall subsystem inadequately enforces host-access rules. This can let an attacker on the management network obtain a root shell on the affected system by leveraging adjacent access. The core issue is an adjacent-root-...

CVE-2013-3377

CVE-2013-3377 affects Cisco TelePresence TC Software prior to 5.1.7 and TE Software prior to 4.1.3. The vulnerability allows remote attackers to cause a DoS (device reload) by sending crafted SIP packets (Bug ID CSCue01743). Cisco’s advisory (cisco-sa-20130619-tpc) confirms two SIP-related DoS vu...

CVE-2013-3378: Improper Input Validation

Cisco TelePresence TC Software before 6.1 and TE Software before 4.1.3 allow remote attackers to cause a denial of service temporary device hang via crafted SIP packets, aka Bug ID CSCuf89557...

PT-2013-4337

Name of the Vulnerable Software and Affected Versions Cisco TelePresence TC Software versions prior to 4.2 Description The issue is related to the firewall subsystem not properly implementing rules for granting access to hosts. This allows remote attackers to obtain shell access with root...

PT-2013-4336

Name of the Vulnerable Software and Affected Versions Cisco TelePresence TC Software versions prior to 6.1 Cisco TelePresence TE Software versions prior to 4.1.3 Description The issue allows remote attackers to cause a denial of service, resulting in a temporary device hang, via crafted SIP...

CVE-2013-3379: Undefined Security Weakness

The firewall subsystem in Cisco TelePresence TC Software before 4.2 does not properly implement rules that grant access to hosts, which allows remote attackers to obtain shell access with root privileges by leveraging connectivity to the management network, aka Bug ID CSCts37781...

CVE-2013-3377: Undefined Security Weakness

Cisco TelePresence TC Software before 5.1.7 and TE Software before 4.1.3 allow remote attackers to cause a denial of service device reload via crafted SIP packets, aka Bug ID CSCue01743...

PT-2013-4335

Name of the Vulnerable Software and Affected Versions Cisco TelePresence TC Software versions prior to 5.1.7 Cisco TelePresence TE Software versions prior to 4.1.3 Description The issue allows remote attackers to cause a denial of service, resulting in a device reload, via crafted SIP packets...