CVE-2014-2171: Cisco Telepresence Tc Software

High severity, CVSS 10.0. EPSS: 3.6% chance of exploitation in the next 30 days.

Heap-based buffer overflow in Cisco TelePresence TC Software 4.x through 6.x before 6.0.1 and TE Software 4.x and 6.0.x before 6.0.2 allows remote attackers to execute arbitrary code via crafted SIP packets, aka Bug ID CSCud81796.

Affected products

• Cisco Telepresence Tc Software: version 4.0.0 only; version 4.0.1 only; version 4.0.4 only; version 4.1.1 only; version 4.1.2 only; version 4.2.0 only; …
• Cisco Telepresence Te Software: version 4.1.0 only; version 4.1.1 only; version 4.1.2 only; version 4.1.3 only; version 6.0 only; version 6.0.1 only

Published 2014-05-02. Last modified 2026-06-17.