CVE-2016-6359

CVE-2016-6359 is an XSS vulnerability in Cisco Smart Call Home Transport Gateway, affecting the Transport Gateway Installation Software 4.1(4.0). The root cause is insufficient input validation in the web framework, enabling remote attackers to inject arbitrary script or HTML by supplying a craft...

CVE-2014-3344

CVE-2014-3344 affects Cisco Transport Gateway for Smart Call Home (TG-SCH) 4.0. Multiple cross-site scripting (XSS) flaws exist in the web framework, allowing remote attackers to inject arbitrary web scripts or HTML via unspecified parameters. Root cause cited: insufficient input validation in th...

CVE-2014-3345

Cisco Transport Gateway for Smart Call Home (TG-SCH) 4.0’s web framework fails to properly check authorization for administrative web pages, allowing remote attackers to modify the product via a crafted URL. Affected component: the web framework; root cause: improper authorization checks in admin...

CVE-2014-3346

CVE-2014-3346 affects the web framework in Cisco Transport Gateway for Smart Call Home (TG-SCH). The issue stems from missing validation of an unspecified parameter, allowing remote authenticated users to trigger a denial of service (service crash) via a crafted string. Impact per CVSS: Network v...