Cisco Telepresence Codec c60 vulnerabilities

3 CVEs affecting Cisco Telepresence Codec c60, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-3377, published 2013-06-21.

More from Cisco.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2011-2577, published 2011-08-31. High severity, CVSS 7.8. EPSS: 12.7% chance of exploitation in the next 30 days. Unspecified vulnerability in Cisco TelePresence C Series Endpoints, E/EX Personal Video units, and MXP Series Codecs, when using software versions before TC 4.0.0 or F9.1, allows remote attackers to…
• CVE-2011-2543, published 2011-09-23. High severity, CVSS 9.0. EPSS: 11.5% chance of exploitation in the next 30 days. Buffer overflow in the cuil component in Cisco Telepresence System Integrator C Series 4.x before TC4.2.0 allows remote authenticated users to cause a denial of service (endpoint reboot or process…
• CVE-2013-3377, published 2013-06-21. High severity, CVSS 7.8. EPSS: 1.9% chance of exploitation in the next 30 days. Cisco TelePresence TC Software before 5.1.7 and TE Software before 4.1.3 allow remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCue01743.