Cisco Telepresence Tc Software vulnerabilities

27 CVEs affecting Cisco Telepresence Tc Software, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-6648, published 2017-06-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-2171, published 2014-05-02. High severity, CVSS 10.0. EPSS: 3.6% chance of exploitation in the next 30 days. Heap-based buffer overflow in Cisco TelePresence TC Software 4.x through 6.x before 6.0.1 and TE Software 4.x and 6.0.x before 6.0.2 allows remote attackers to execute arbitrary code via crafted SIP…
CVE-2017-6648, published 2017-06-08. High severity, CVSS 7.5. EPSS: 3.6% chance of exploitation in the next 30 days. A vulnerability in the Session Initiation Protocol (SIP) of the Cisco TelePresence Codec (TC) and Collaboration Endpoint (CE) Software could allow an unauthenticated, remote attacker to cause a…
CVE-2014-2168, published 2014-05-02. High severity, CVSS 7.6. EPSS: 2.8% chance of exploitation in the next 30 days. Buffer overflow in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to execute arbitrary code via crafted DNS response packets, aka Bug ID CSCty44804.
CVE-2015-4271, published 2015-07-15. Medium severity, CVSS 6.4. EPSS: 2.4% chance of exploitation in the next 30 days. Cisco TelePresence TC before 7.3.4 on Integrator C devices allows remote attackers to bypass authentication via vectors involving multiple request parameters, aka Bug ID CSCuv00604.
CVE-2014-2170, published 2014-05-02. High severity, CVSS 9.0. EPSS: 2.2% chance of exploitation in the next 30 days. Cisco TelePresence TC Software 4.x and 5.x before 5.1.7 and 6.x before 6.0.1 and TE Software 4.x and 6.0 allow remote authenticated users to execute arbitrary commands by using the commands as…
CVE-2014-2169, published 2014-05-02. High severity, CVSS 9.0. EPSS: 2.1% chance of exploitation in the next 30 days. Cisco TelePresence TC Software 4.x through 6.x before 6.2.0 and TE Software 4.x and 6.0 allow remote authenticated users to execute arbitrary commands by using the commands as arguments to internal…
CVE-2015-0722, published 2015-05-25. High severity, CVSS 7.8. EPSS: 1.9% chance of exploitation in the next 30 days. The network drivers in Cisco TelePresence T, Cisco TelePresence TE, and Cisco TelePresence TC before 7.3.2 allow remote attackers to cause a denial of service (process restart or device reload) via a…
CVE-2013-3378, published 2013-06-21. High severity, CVSS 7.8. EPSS: 1.9% chance of exploitation in the next 30 days. Cisco TelePresence TC Software before 6.1 and TE Software before 4.1.3 allow remote attackers to cause a denial of service (temporary device hang) via crafted SIP packets, aka Bug ID CSCuf89557.
CVE-2013-3377, published 2013-06-21. High severity, CVSS 7.8. EPSS: 1.9% chance of exploitation in the next 30 days. Cisco TelePresence TC Software before 5.1.7 and TE Software before 4.1.3 allow remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCue01743.
CVE-2015-0697, published 2015-04-15. Medium severity, CVSS 5.8. EPSS: 1.9% chance of exploitation in the next 30 days. Open redirect vulnerability in the login page in Cisco TC Software before 6.3-26 and 7.x before 7.3.0 on Cisco TelePresence Collaboration Desk and Room Endpoints devices allows remote attackers to…

Latest

CVE-2016-6459, published 2016-11-19. Medium severity, CVSS 5.5. EPSS: 0.7% chance of exploitation in the next 30 days. Cisco TelePresence endpoints running either CE or TC software contain a vulnerability that could allow an authenticated, local attacker to execute a local shell command injection. More Information:…
CVE-2016-1387, published 2016-05-05. Critical severity, CVSS 9.8. EPSS: 1.8% chance of exploitation in the next 30 days. The XML API in TelePresence Codec (TC) 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.3.2, 7.3.3, 7.3.4, and 7.3.5 and Collaboration Endpoint (CE) 8.0.0, 8.0.1, and 8.1.0 in Cisco TelePresence Software mishandles…
CVE-2015-0770, published 2015-06-07. Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days. CRLF injection vulnerability in Cisco TelePresence TC 6.x before 6.3.4 and 7.x before 7.3.3 on Integrator C SX20 devices allows remote attackers to inject arbitrary HTTP headers and conduct HTTP…
CVE-2014-2174, published 2015-05-25. High severity, CVSS 8.3. EPSS: 1% chance of exploitation in the next 30 days. Cisco TelePresence T, TelePresence TE, and TelePresence TC before 7.1 do not properly implement access control, which allows remote attackers to obtain root privileges by sending packets on the local…
CVE-2015-0696, published 2015-04-15. Medium severity, CVSS 4.3. EPSS: 1.5% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the login page in Cisco TC Software before 7.1.0 on Cisco TelePresence Collaboration Desk and Room Endpoints devices allows remote attackers to inject…
CVE-2014-2175, published 2014-05-02. High severity, CVSS 7.8. EPSS: 1.3% chance of exploitation in the next 30 days. Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allow remote attackers to cause a denial of service (memory consumption) via crafted H.225 packets, aka Bug ID CSCtq78849.