Cisco Telepresence Mcu Software vulnerabilities

4 CVEs affecting Cisco Telepresence Mcu Software, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-3792, published 2017-02-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-3792, published 2017-02-01. Critical severity, CVSS 9.8. EPSS: 6.8% chance of exploitation in the next 30 days. A vulnerability in a proprietary device driver in the kernel of Cisco TelePresence Multipoint Control Unit (MCU) Software could allow an unauthenticated, remote attacker to execute arbitrary code or…
CVE-2014-3397, published 2014-10-19. High severity, CVSS 7.8. EPSS: 3.8% chance of exploitation in the next 30 days. The network stack in Cisco TelePresence MCU Software before 4.3(2.30) allows remote attackers to cause a denial of service (memory consumption) via crafted TCP packets, aka Bug ID CSCtz35468.
CVE-2015-0713, published 2015-05-25. High severity, CVSS 9.0. EPSS: 2.9% chance of exploitation in the next 30 days. The web framework in Cisco TelePresence Advanced Media Gateway Series Software before 1.1(1.40), Cisco TelePresence IP Gateway Series Software, Cisco TelePresence IP VCR Series Software before…
CVE-2015-4257, published 2015-07-10. Medium severity, CVSS 6.8. EPSS: 1% chance of exploitation in the next 30 days. Cross-site request forgery (CSRF) vulnerability on Cisco TelePresence MCU 4500 devices with software 4.5(1.55) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID…