Cisco Telepresence System 3000 vulnerabilities

14 CVEs affecting Cisco Telepresence System 3000, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-0661, published 2014-01-22.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2011-0372, published 2011-02-25. High severity, CVSS 10.0. EPSS: 3.3% chance of exploitation in the next 30 days. The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote attackers to execute arbitrary commands via a malformed request, related to "command…
CVE-2011-0375, published 2011-02-25. High severity, CVSS 9.0. EPSS: 2.8% chance of exploitation in the next 30 days. The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.6.x allows remote authenticated users to execute arbitrary commands via a malformed request, related to…
CVE-2011-0374, published 2011-02-25. High severity, CVSS 9.0. EPSS: 2.8% chance of exploitation in the next 30 days. The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote authenticated users to execute arbitrary commands via a malformed request, related to…
CVE-2011-0373, published 2011-02-25. High severity, CVSS 9.0. EPSS: 2.8% chance of exploitation in the next 30 days. The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote authenticated users to execute arbitrary commands via a malformed request, related to…
CVE-2011-0376, published 2011-02-25. High severity, CVSS 10.0. EPSS: 2.6% chance of exploitation in the next 30 days. The TFTP implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x, 1.6.0, and 1.6.1 allows remote attackers to obtain sensitive information via a GET request, aka Bug…
CVE-2011-0377, published 2011-02-25. High severity, CVSS 7.8. EPSS: 2.5% chance of exploitation in the next 30 days. Cisco TelePresence endpoint devices with software 1.2.x through 1.6.x allow remote attackers to cause a denial of service (service crash) via a malformed SOAP request in conjunction with a spoofed…
CVE-2014-0661, published 2014-01-22. High severity, CVSS 8.3. EPSS: 2.3% chance of exploitation in the next 30 days. The System Status Collection Daemon (SSCD) in Cisco TelePresence System 500-37, 1000, 1300-65, and 3xxx before 1.10.2(42), and 500-32, 1300-47, TX1310 65, and TX9xxx before 6.0.4(11), allows remote…
CVE-2012-3075, published 2012-07-12. High severity, CVSS 9.0. EPSS: 2.2% chance of exploitation in the next 30 days. The administrative web interface on Cisco TelePresence Immersive Endpoint Devices before 1.7.4 allows remote authenticated users to execute arbitrary commands via a malformed request on TCP port 443,…
CVE-2011-0379, published 2011-02-25. High severity, CVSS 7.9. EPSS: 2.2% chance of exploitation in the next 30 days. Buffer overflow on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 1.6.x; Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x;…
CVE-2013-3454, published 2013-08-08. High severity, CVSS 10.0. EPSS: 2.1% chance of exploitation in the next 30 days. Cisco TelePresence System Software 1.10.1 and earlier on 500, 13X0, 1X00, 30X0, and 3X00 devices, and 6.0.3 and earlier on TX 9X00 devices, has a default password for the pwrecovery account, which…

Latest

CVE-2012-3074, published 2012-07-12. High severity, CVSS 8.3. EPSS: 1.2% chance of exploitation in the next 30 days. An unspecified API on Cisco TelePresence Immersive Endpoint Devices before 1.9.1 allows remote attackers to execute arbitrary commands by leveraging certain adjacency and sending a malformed request…
CVE-2012-3073, published 2012-07-12. High severity, CVSS 7.8. EPSS: 1.8% chance of exploitation in the next 30 days. The IP implementation on Cisco TelePresence Multipoint Switch before 1.8.1, Cisco TelePresence Manager before 1.9.0, and Cisco TelePresence Recording Server 1.8 and earlier allows remote attackers to…
CVE-2012-2486, published 2012-07-12. High severity, CVSS 8.3. EPSS: 1.7% chance of exploitation in the next 30 days. The Cisco Discovery Protocol (CDP) implementation on Cisco TelePresence Multipoint Switch before 1.9.0, Cisco TelePresence Immersive Endpoint Devices before 1.9.1, Cisco TelePresence Manager before…
CVE-2011-0378, published 2011-02-25. High severity, CVSS 8.3. EPSS: 1.4% chance of exploitation in the next 30 days. The XML-RPC implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote attackers to execute arbitrary commands via a TCP request, related to a "command…