Cisco Telepresence Mxp Software vulnerabilities

2 CVEs affecting Cisco Telepresence Mxp Software, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2011-2544, published 2011-09-23.

More from Cisco.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2011-2577, published 2011-08-31. High severity, CVSS 7.8. EPSS: 12.7% chance of exploitation in the next 30 days. Unspecified vulnerability in Cisco TelePresence C Series Endpoints, E/EX Personal Video units, and MXP Series Codecs, when using software versions before TC 4.0.0 or F9.1, allows remote attackers to…
• CVE-2011-2544, published 2011-09-23. Low severity, CVSS 3.5. EPSS: 4.7% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the web interface in Cisco TelePresence System MXP Series F9.1 and earlier allows remote authenticated users to inject arbitrary web script or HTML via a…