Cisco Telepresence System 500 Series vulnerabilities

8 CVEs affecting Cisco Telepresence System 500 Series, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2011-0379, published 2011-02-25.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2011-0372, published 2011-02-25. High severity, CVSS 10.0. EPSS: 3.3% chance of exploitation in the next 30 days. The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote attackers to execute arbitrary commands via a malformed request, related to "command…
CVE-2011-0375, published 2011-02-25. High severity, CVSS 9.0. EPSS: 2.8% chance of exploitation in the next 30 days. The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.6.x allows remote authenticated users to execute arbitrary commands via a malformed request, related to…
CVE-2011-0374, published 2011-02-25. High severity, CVSS 9.0. EPSS: 2.8% chance of exploitation in the next 30 days. The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote authenticated users to execute arbitrary commands via a malformed request, related to…
CVE-2011-0373, published 2011-02-25. High severity, CVSS 9.0. EPSS: 2.8% chance of exploitation in the next 30 days. The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote authenticated users to execute arbitrary commands via a malformed request, related to…
CVE-2011-0376, published 2011-02-25. High severity, CVSS 10.0. EPSS: 2.6% chance of exploitation in the next 30 days. The TFTP implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x, 1.6.0, and 1.6.1 allows remote attackers to obtain sensitive information via a GET request, aka Bug…
CVE-2011-0377, published 2011-02-25. High severity, CVSS 7.8. EPSS: 2.5% chance of exploitation in the next 30 days. Cisco TelePresence endpoint devices with software 1.2.x through 1.6.x allow remote attackers to cause a denial of service (service crash) via a malformed SOAP request in conjunction with a spoofed…
CVE-2011-0379, published 2011-02-25. High severity, CVSS 7.9. EPSS: 2.2% chance of exploitation in the next 30 days. Buffer overflow on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 1.6.x; Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x;…
CVE-2011-0378, published 2011-02-25. High severity, CVSS 8.3. EPSS: 1.4% chance of exploitation in the next 30 days. The XML-RPC implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote attackers to execute arbitrary commands via a TCP request, related to a "command…