Cisco IP Video Phone e20 vulnerabilities

2 CVEs affecting Cisco IP Video Phone e20, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-3377, published 2013-06-21.

More from Cisco.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2011-4659, published 2012-01-19. High severity, CVSS 10.0. EPSS: 1.9% chance of exploitation in the next 30 days. Cisco TelePresence Software before TE 4.1.1 on the Cisco IP Video Phone E20 has a default password for the root account after an upgrade to TE 4.1.0, which makes it easier for remote attackers to…
• CVE-2013-3377, published 2013-06-21. High severity, CVSS 7.8. EPSS: 1.9% chance of exploitation in the next 30 days. Cisco TelePresence TC Software before 5.1.7 and TE Software before 4.1.3 allow remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCue01743.