CVE-2014-2170

CVE-2014-2170 affects Cisco TelePresence TC Software 4.x/5.x (and TE Software 4.x/6.0) prior to the patched versions 5.1.7 and 6.0.1, respectively. The vulnerability is a command injection via tshell (tcsh) scripts that could allow remote authenticated users to execute arbitrary commands. The iss...

CVE-2014-2175

Cisco TelePresence TC Software 4.x/5.x and TE Software 4.x/6.0 are affected by CVE-2014-2175: a DoS via crafted H.225 packets causing memory consumption. The vulnerability is listed in Cisco’s advisory for TC/TE; updates are available to address these issues. Connected sources confirm affected ve...

CVE-2014-2163

CVE-2014-2163 affects Cisco TelePresence TC and TE Software (4.x and 5.x). The vulnerability lies in the SIP implementation, where crafted SIP packets can cause a denial-of-service resulting in a device reload. The issue is documented across multiple sources (Cisco advisory Cisco-SA-20140430-TCTE...

CVE-2014-2166

CVE-2014-2166 concerns Cisco TelePresence TC/TE Software 4.x where a flaw in the SIP implementation can be triggered by crafted SIP packets, causing a denial of service (device reload). The vulnerability is part of a set of SIP-related DoS issues in the Cisco TelePresence TC/TE software family (B...

CVE-2014-2173

Summary: CVE-2014-2173 affects Cisco TelePresence TC Software 4.x/5.x and TE Software 4.x/6.0, where access to the serial port is not properly restricted, enabling local users to gain privileges via unspecified commands (Bug CSCub67692). What’s affected (as stated): Cisco TelePresence TC and TE S...

CVE-2014-2170

Cisco TelePresence TC Software 4.x and 5.x before 5.1.7 and 6.x before 6.0.1 and TE Software 4.x and 6.0 allow remote authenticated users to execute arbitrary commands by using the commands as arguments to tshell aka tcsh scripts, aka Bug ID CSCue60202...

CVE-2014-2169

Cisco TelePresence TC/TE Software 4.x–6.x (before 6.2.0 for TC and 6.0 for TE) is affected by CVE-2014-2169: remote authenticated users can execute arbitrary commands by passing commands as arguments to internal system scripts (CSCue60211). The vulnerability is exposed in how user-supplied input ...

PT-2014-4523

Name of the Vulnerable Software and Affected Versions Cisco TelePresence TC Software versions 4.x through 5.x Cisco TelePresence TE Software versions 4.x through 6.0 Description The issue allows remote attackers to cause a denial of service, resulting in a device reload, by sending crafted SIP...

CVE-2014-2169: Improper Input Validation

Cisco TelePresence TC Software 4.x through 6.x before 6.2.0 and TE Software 4.x and 6.0 allow remote authenticated users to execute arbitrary commands by using the commands as arguments to internal system scripts, aka Bug ID CSCue60211...

CVE-2014-2164: Improper Input Validation

The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to cause a denial of service device reload via crafted SIP packets, aka Bug ID CSCuj94651...

PT-2014-4525

Name of the Vulnerable Software and Affected Versions Cisco TelePresence TC Software versions 4.x through 5.x Cisco TelePresence TE Software versions 4.x through 6.0 Description The issue allows remote attackers to cause a denial of service, resulting in a device reload, by sending crafted SIP...

PT-2014-4524

Name of the Vulnerable Software and Affected Versions Cisco TelePresence TC Software versions 4.x Cisco TelePresence TE Software versions 4.x Description The issue allows remote attackers to cause a denial of service, resulting in a device reload, via crafted SIP packets. Recommendations For Cisc...

PT-2014-4528

Name of the Vulnerable Software and Affected Versions Cisco TelePresence TC Software versions 4.x through 5.x before 5.1.7 Cisco TelePresence TC Software version 6.x before 6.0.1 Cisco TelePresence TE Software versions 4.x Cisco TelePresence TE Software version 6.0 Description The issue allows...

CVE-2014-2170: Improper Control of Generation of Code

Cisco TelePresence TC Software 4.x and 5.x before 5.1.7 and 6.x before 6.0.1 and TE Software 4.x and 6.0 allow remote authenticated users to execute arbitrary commands by using the commands as arguments to tshell aka tcsh scripts, aka Bug ID CSCue60202...

PT-2014-4531

Name of the Vulnerable Software and Affected Versions Cisco TelePresence TC Software versions 4.x through 5.x Cisco TelePresence TE Software versions 4.x through 6.0 Description The issue allows local users to gain privileges via unspecified commands due to improper restriction of access to the...

PT-2014-4522

Name of the Vulnerable Software and Affected Versions Cisco TelePresence TC Software versions 4.x through 5.x Cisco TelePresence TE Software versions 4.x through 6.0 Description The issue allows remote attackers to cause a denial of service, resulting in a device reload, by sending crafted SIP...

CVE-2014-2168: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to execute arbitrary code via crafted DNS response packets, aka Bug ID CSCty44804...

PT-2014-4529

Name of the Vulnerable Software and Affected Versions Cisco TelePresence TC Software versions 4.x through 6.x before 6.0.1 Cisco TelePresence TE Software versions 4.x and 6.0.x before 6.0.2 Description A heap-based buffer overflow issue allows remote attackers to execute arbitrary code via crafte...

CVE-2014-2172: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows local users to gain privileges by leveraging improper handling of the u-boot compiler flag for internal executable files, aka Bug ID CSCub67693...

CVE-2014-2163: Improper Input Validation

The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x allows remote attackers to cause a denial of service device reload via crafted SIP packets, aka Bug ID CSCua64961...