Cisco Telepresence System 1000 vulnerabilities

9 CVEs affecting Cisco Telepresence System 1000, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-0661, published 2014-01-22.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2011-0372, published 2011-02-25. High severity, CVSS 10.0. EPSS: 3.3% chance of exploitation in the next 30 days. The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote attackers to execute arbitrary commands via a malformed request, related to "command…
CVE-2011-0375, published 2011-02-25. High severity, CVSS 9.0. EPSS: 2.8% chance of exploitation in the next 30 days. The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.6.x allows remote authenticated users to execute arbitrary commands via a malformed request, related to…
CVE-2011-0374, published 2011-02-25. High severity, CVSS 9.0. EPSS: 2.8% chance of exploitation in the next 30 days. The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote authenticated users to execute arbitrary commands via a malformed request, related to…
CVE-2011-0373, published 2011-02-25. High severity, CVSS 9.0. EPSS: 2.8% chance of exploitation in the next 30 days. The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote authenticated users to execute arbitrary commands via a malformed request, related to…
CVE-2011-0376, published 2011-02-25. High severity, CVSS 10.0. EPSS: 2.6% chance of exploitation in the next 30 days. The TFTP implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x, 1.6.0, and 1.6.1 allows remote attackers to obtain sensitive information via a GET request, aka Bug…
CVE-2011-0377, published 2011-02-25. High severity, CVSS 7.8. EPSS: 2.5% chance of exploitation in the next 30 days. Cisco TelePresence endpoint devices with software 1.2.x through 1.6.x allow remote attackers to cause a denial of service (service crash) via a malformed SOAP request in conjunction with a spoofed…
CVE-2014-0661, published 2014-01-22. High severity, CVSS 8.3. EPSS: 2.3% chance of exploitation in the next 30 days. The System Status Collection Daemon (SSCD) in Cisco TelePresence System 500-37, 1000, 1300-65, and 3xxx before 1.10.2(42), and 500-32, 1300-47, TX1310 65, and TX9xxx before 6.0.4(11), allows remote…
CVE-2011-0379, published 2011-02-25. High severity, CVSS 7.9. EPSS: 2.2% chance of exploitation in the next 30 days. Buffer overflow on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 1.6.x; Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x;…
CVE-2011-0378, published 2011-02-25. High severity, CVSS 8.3. EPSS: 1.4% chance of exploitation in the next 30 days. The XML-RPC implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote attackers to execute arbitrary commands via a TCP request, related to a "command…