Cisco Telepresence System Software vulnerabilities

25 CVEs affecting Cisco Telepresence System Software, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-3362, published 2014-09-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2011-0372, published 2011-02-25. High severity, CVSS 10.0. EPSS: 3.3% chance of exploitation in the next 30 days. The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote attackers to execute arbitrary commands via a malformed request, related to "command…
CVE-2011-0375, published 2011-02-25. High severity, CVSS 9.0. EPSS: 2.8% chance of exploitation in the next 30 days. The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.6.x allows remote authenticated users to execute arbitrary commands via a malformed request, related to…
CVE-2011-0374, published 2011-02-25. High severity, CVSS 9.0. EPSS: 2.8% chance of exploitation in the next 30 days. The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote authenticated users to execute arbitrary commands via a malformed request, related to…
CVE-2011-0373, published 2011-02-25. High severity, CVSS 9.0. EPSS: 2.8% chance of exploitation in the next 30 days. The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote authenticated users to execute arbitrary commands via a malformed request, related to…
CVE-2014-3362, published 2014-09-12. High severity, CVSS 7.8. EPSS: 2.8% chance of exploitation in the next 30 days. Memory leak in Cisco TelePresence System Edge MXP Series Software F9.3.3 and earlier allows remote attackers to cause a denial of service (management outage) via multiple TELNET connections, aka Bug…
CVE-2011-0376, published 2011-02-25. High severity, CVSS 10.0. EPSS: 2.6% chance of exploitation in the next 30 days. The TFTP implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x, 1.6.0, and 1.6.1 allows remote attackers to obtain sensitive information via a GET request, aka Bug…
CVE-2011-0377, published 2011-02-25. High severity, CVSS 7.8. EPSS: 2.5% chance of exploitation in the next 30 days. Cisco TelePresence endpoint devices with software 1.2.x through 1.6.x allow remote attackers to cause a denial of service (service crash) via a malformed SOAP request in conjunction with a spoofed…
CVE-2014-0661, published 2014-01-22. High severity, CVSS 8.3. EPSS: 2.3% chance of exploitation in the next 30 days. The System Status Collection Daemon (SSCD) in Cisco TelePresence System 500-37, 1000, 1300-65, and 3xxx before 1.10.2(42), and 500-32, 1300-47, TX1310 65, and TX9xxx before 6.0.4(11), allows remote…
CVE-2012-3075, published 2012-07-12. High severity, CVSS 9.0. EPSS: 2.2% chance of exploitation in the next 30 days. The administrative web interface on Cisco TelePresence Immersive Endpoint Devices before 1.7.4 allows remote authenticated users to execute arbitrary commands via a malformed request on TCP port 443,…
CVE-2011-0379, published 2011-02-25. High severity, CVSS 7.9. EPSS: 2.2% chance of exploitation in the next 30 days. Buffer overflow on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 1.6.x; Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x;…

Latest

CVE-2014-3274, published 2014-05-26. Medium severity, CVSS 4.3. EPSS: 1.1% chance of exploitation in the next 30 days. Cisco TelePresence System (CTS) 6.0(.5)(5) and earlier falls back to HTTP when certain HTTPS sessions cannot be established, which allows man-in-the-middle attackers to obtain sensitive directory…
CVE-2014-2161, published 2014-05-02. High severity, CVSS 7.8. EPSS: 1.6% chance of exploitation in the next 30 days. The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted packets, aka Bug ID CSCty45731.
CVE-2014-2160, published 2014-05-02. High severity, CVSS 7.8. EPSS: 1.6% chance of exploitation in the next 30 days. The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted packets, aka Bug ID CSCty45745.
CVE-2014-2159, published 2014-05-02. High severity, CVSS 7.8. EPSS: 1.6% chance of exploitation in the next 30 days. The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted packets, aka Bug ID CSCtq78722.
CVE-2014-2158, published 2014-05-02. High severity, CVSS 7.8. EPSS: 1.3% chance of exploitation in the next 30 days. Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCty45720.
CVE-2014-2157, published 2014-05-02. High severity, CVSS 7.1. EPSS: 1.2% chance of exploitation in the next 30 days. Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCty45733.
CVE-2014-2156, published 2014-05-02. High severity, CVSS 7.1. EPSS: 1.2% chance of exploitation in the next 30 days. Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCty45739.
CVE-2013-3454, published 2013-08-08. High severity, CVSS 10.0. EPSS: 2.1% chance of exploitation in the next 30 days. Cisco TelePresence System Software 1.10.1 and earlier on 500, 13X0, 1X00, 30X0, and 3X00 devices, and 6.0.3 and earlier on TX 9X00 devices, has a default password for the pwrecovery account, which…