CVSS: 7.8EPSS: 0%CPEs: 26EXPL: 0CVE-2014-2172
https://notcve.org/view.php?id=CVE-2014-2172
02 May 2014 — Buffer overflow in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows local users to gain privileges by leveraging improper handling of the u-boot compiler flag for internal executable files, aka Bug ID CSCub67693. Desbordamiento de buffer en Cisco TelePresence TC Software 4.x y 5.x y TE Software 4.x y 6.0 permite a usuarios locales ganar privilegios mediante el aprovechamiento del manejo indebido del indicador de compilador u-boot para archivos ejecutables internos, también conoc... • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140430-tcte • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.8EPSS: 0%CPEs: 26EXPL: 0CVE-2014-2173
https://notcve.org/view.php?id=CVE-2014-2173
02 May 2014 — Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 do not properly restrict access to the serial port, which allows local users to gain privileges via unspecified commands, aka Bug ID CSCub67692. Cisco TelePresence TC Software 4.x y 5.x y TE Software 4.x y 6.0 no restringe debidamente acceso al puerto serie, lo que permite a usuarios locales ganar privilegios a través de comandos no especificados, también conocido como Bug ID CSCub67692. • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140430-tcte • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 7.8EPSS: 0%CPEs: 26EXPL: 0CVE-2014-2175
https://notcve.org/view.php?id=CVE-2014-2175
02 May 2014 — Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allow remote attackers to cause a denial of service (memory consumption) via crafted H.225 packets, aka Bug ID CSCtq78849. Cisco TelePresence TC Software 4.x y 5.x y TE Software 4.x y 6.0 permite a atacantes remotos causar una denegación de servicio (consumo de memoria) a través de paquetes H.225 manipulados, también conocido como Bug ID CSCtq78849. • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140430-tcte • CWE-20: Improper Input Validation •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0CVE-2013-3405
https://notcve.org/view.php?id=CVE-2013-3405
10 Jul 2013 — The web portal in TC software on Cisco TelePresence endpoints does not require an exact password match during a login attempt by a user who has not configured a password, which allows remote attackers to bypass authentication by sending an arbitrary password, aka Bug ID CSCud96071. El portal web en TC software en Cisco TelePresence no requiere una coincidencia exacta con el password durante un intento de login por un usuario que no ha configurado un password, lo que permite a atacantes remotos eludir la aut... • http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3405 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 0CVE-2013-3401
https://notcve.org/view.php?id=CVE-2013-3401
02 Jul 2013 — The SIP implementation in Cisco TelePresence TC Software allows remote attackers to trigger unintended use of NOTIFY messages via unspecified vectors, aka Bug ID CSCud96080. La implementación de SIP en Cisco TelePresence TC Software permite a atacantes remotos provocar el uso no intencionado de mensajes NOTIFY a través de vectores no especificados. Aka Bug ID CSCud96080. • http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3401 •
CVSS: 7.8EPSS: 0%CPEs: 37EXPL: 0CVE-2013-3377
https://notcve.org/view.php?id=CVE-2013-3377
21 Jun 2013 — Cisco TelePresence TC Software before 5.1.7 and TE Software before 4.1.3 allow remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCue01743. Cisco TelePresence TC Software anterior a v5.1.7 y TE Software anterior a v4.1.3 permite a atacantes remotos causar una denegación de servicio (reinicio del dispositivo) mediante paquetes SIP especialmente diseñados, también conocido como Bug ID CSCue01743. • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130619-tpc • CWE-399: Resource Management Errors •
CVSS: 7.8EPSS: 0%CPEs: 5EXPL: 0CVE-2013-3378
https://notcve.org/view.php?id=CVE-2013-3378
21 Jun 2013 — Cisco TelePresence TC Software before 6.1 and TE Software before 4.1.3 allow remote attackers to cause a denial of service (temporary device hang) via crafted SIP packets, aka Bug ID CSCuf89557. Cisco TelePresence TC Software anterior a v6.1 y TE Software anterior a v4.1.3 permite a atacantes remotos causar una denegación de servicio (cuelgue temporal del dispositivo) mediante paquetes SIP especialmente diseñados, también conocido como Bug ID CSCuf89557. • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130619-tpc • CWE-20: Improper Input Validation •
CVSS: 9.8EPSS: 0%CPEs: 5EXPL: 0CVE-2013-3379
https://notcve.org/view.php?id=CVE-2013-3379
21 Jun 2013 — The firewall subsystem in Cisco TelePresence TC Software before 4.2 does not properly implement rules that grant access to hosts, which allows remote attackers to obtain shell access with root privileges by leveraging connectivity to the management network, aka Bug ID CSCts37781. El subsistema de firewall en Cisco TelePresence TC Software anterior a v4.2 no implementa correctamente reglas que conceden el acceso a los hosts, lo que permite a atacantes remotos obtener shell con privilegios de root mediante el... • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130619-tpc • CWE-264: Permissions, Privileges, and Access Controls •