Cisco Telepresence Te Software vulnerabilities

17 CVEs affecting Cisco Telepresence Te Software, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-0722, published 2015-05-25.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-2171, published 2014-05-02. High severity, CVSS 10.0. EPSS: 3.6% chance of exploitation in the next 30 days. Heap-based buffer overflow in Cisco TelePresence TC Software 4.x through 6.x before 6.0.1 and TE Software 4.x and 6.0.x before 6.0.2 allows remote attackers to execute arbitrary code via crafted SIP…
CVE-2014-2168, published 2014-05-02. High severity, CVSS 7.6. EPSS: 2.8% chance of exploitation in the next 30 days. Buffer overflow in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to execute arbitrary code via crafted DNS response packets, aka Bug ID CSCty44804.
CVE-2014-2170, published 2014-05-02. High severity, CVSS 9.0. EPSS: 2.2% chance of exploitation in the next 30 days. Cisco TelePresence TC Software 4.x and 5.x before 5.1.7 and 6.x before 6.0.1 and TE Software 4.x and 6.0 allow remote authenticated users to execute arbitrary commands by using the commands as…
CVE-2014-2169, published 2014-05-02. High severity, CVSS 9.0. EPSS: 2.1% chance of exploitation in the next 30 days. Cisco TelePresence TC Software 4.x through 6.x before 6.2.0 and TE Software 4.x and 6.0 allow remote authenticated users to execute arbitrary commands by using the commands as arguments to internal…
CVE-2015-0722, published 2015-05-25. High severity, CVSS 7.8. EPSS: 1.9% chance of exploitation in the next 30 days. The network drivers in Cisco TelePresence T, Cisco TelePresence TE, and Cisco TelePresence TC before 7.3.2 allow remote attackers to cause a denial of service (process restart or device reload) via a…
CVE-2013-3378, published 2013-06-21. High severity, CVSS 7.8. EPSS: 1.9% chance of exploitation in the next 30 days. Cisco TelePresence TC Software before 6.1 and TE Software before 4.1.3 allow remote attackers to cause a denial of service (temporary device hang) via crafted SIP packets, aka Bug ID CSCuf89557.
CVE-2013-3377, published 2013-06-21. High severity, CVSS 7.8. EPSS: 1.9% chance of exploitation in the next 30 days. Cisco TelePresence TC Software before 5.1.7 and TE Software before 4.1.3 allow remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCue01743.
CVE-2014-2175, published 2014-05-02. High severity, CVSS 7.8. EPSS: 1.3% chance of exploitation in the next 30 days. Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allow remote attackers to cause a denial of service (memory consumption) via crafted H.225 packets, aka Bug ID CSCtq78849.
CVE-2014-2167, published 2014-05-02. High severity, CVSS 7.8. EPSS: 1.3% chance of exploitation in the next 30 days. The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug…
CVE-2014-2166, published 2014-05-02. High severity, CVSS 7.8. EPSS: 1.3% chance of exploitation in the next 30 days. The SIP implementation in Cisco TelePresence TC Software 4.x and TE Software 4.x allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCto70562.

Latest

CVE-2014-2174, published 2015-05-25. High severity, CVSS 8.3. EPSS: 1% chance of exploitation in the next 30 days. Cisco TelePresence T, TelePresence TE, and TelePresence TC before 7.1 do not properly implement access control, which allows remote attackers to obtain root privileges by sending packets on the local…
CVE-2014-2173, published 2014-05-02. High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days. Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 do not properly restrict access to the serial port, which allows local users to gain privileges via unspecified commands, aka…
CVE-2014-2172, published 2014-05-02. Medium severity, CVSS 6.6. EPSS: 0.3% chance of exploitation in the next 30 days. Buffer overflow in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows local users to gain privileges by leveraging improper handling of the u-boot compiler flag for…