Cisco Transport Gateway Installation Software vulnerabilities

4 CVEs affecting Cisco Transport Gateway Installation Software, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-6359, published 2016-08-22.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-3345, published 2014-08-28. Medium severity, CVSS 5.0. EPSS: 2.2% chance of exploitation in the next 30 days. The web framework in Cisco Transport Gateway for Smart Call Home (aka TG-SCH or Transport Gateway Installation Software) 4.0 does not properly check authorization for administrative web pages, which…
CVE-2014-3344, published 2014-08-28. Medium severity, CVSS 4.3. EPSS: 2% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in the web framework in Cisco Transport Gateway for Smart Call Home (aka TG-SCH or Transport Gateway Installation Software) 4.0 allow remote…
CVE-2014-3346, published 2014-08-29. Medium severity, CVSS 6.3. EPSS: 1.9% chance of exploitation in the next 30 days. The web framework in Cisco Transport Gateway for Smart Call Home (aka TG-SCH or Transport Gateway Installation Software) does not validate an unspecified parameter, which allows remote authenticated…
CVE-2016-6359, published 2016-08-22. Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in Cisco Transport Gateway Installation Software 4.1(4.0) on Smart Call Home Transport Gateway devices allows remote attackers to inject arbitrary web script…