24 results (0.020 seconds)

CVSS: 7.8EPSS: 0%CPEs: 15EXPL: 0

CVE-2014-3362

https://notcve.org/view.php?id=CVE-2014-3362

12 Sep 2014 — Memory leak in Cisco TelePresence System Edge MXP Series Software F9.3.3 and earlier allows remote attackers to cause a denial of service (management outage) via multiple TELNET connections, aka Bug ID CSCuo63677. Fuga de memoria en Cisco TelePresence System Edge MXP Series Software F9.3.3 y anteriores permite a atacantes remotos causar una denegación de servicio (interrupción de la gestión) a través de múltiples conexiones TELNET, también conocido como Bug ID CSCuo63677. • http://secunia.com/advisories/61072 • CWE-399: Resource Management Errors •

CVSS: 4.3EPSS: 0%CPEs: 58EXPL: 0

CVE-2014-3274

https://notcve.org/view.php?id=CVE-2014-3274

23 May 2014 — Cisco TelePresence System (CTS) 6.0(.5)(5) and earlier falls back to HTTP when certain HTTPS sessions cannot be established, which allows man-in-the-middle attackers to obtain sensitive directory information by leveraging a network position between CTS and Cisco Unified Communications Manager (UCM) to block HTTPS traffic, aka Bug ID CSCuj26326. Cisco TelePresence System (CTS) 6.0(.5)(5) y anteriores recurre a HTTP cuando ciertas sesiones HTTPS no pueden ser establecidas, lo que permite a atacantes man-in-th... • http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3274 • CWE-310: Cryptographic Issues •

CVSS: 7.5EPSS: 0%CPEs: 22EXPL: 0

CVE-2014-2156

https://notcve.org/view.php?id=CVE-2014-2156

02 May 2014 — Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCty45739. Cisco TelePresence System Serie MXP Software anterior a F9.3.1 permite a atacantes remotos causar una denegación de servicio (reinicio de dispositivo) a través de paquetes SIP manipulados, también conocido como Bug ID CSCty45739. • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140430-mxp • CWE-20: Improper Input Validation •

CVSS: 7.5EPSS: 0%CPEs: 22EXPL: 0

CVE-2014-2157

https://notcve.org/view.php?id=CVE-2014-2157

02 May 2014 — Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCty45733. Cisco TelePresence System Serie MXP Software anterior a F9.3.1 permite a atacantes remotos causar una denegación de servicio (reinicio de dispositivo) a través de paquetes SIP manipulados, también conocido como Bug ID CSCty45733. • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140430-mxp • CWE-20: Improper Input Validation •

CVSS: 7.8EPSS: 0%CPEs: 22EXPL: 0

CVE-2014-2158

https://notcve.org/view.php?id=CVE-2014-2158

02 May 2014 — Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCty45720. Cisco TelePresence System Serie MXP Software anterior a F9.3.1 permite a atacantes remotos causar una denegación de servicio (reinicio de dispositivo) a través de paquetes SIP manipulados, también conocido como Bug ID CSCty45720. • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140430-mxp • CWE-20: Improper Input Validation •

CVSS: 7.8EPSS: 0%CPEs: 22EXPL: 0

CVE-2014-2159

https://notcve.org/view.php?id=CVE-2014-2159

02 May 2014 — The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted packets, aka Bug ID CSCtq78722. El subsistema H.225 en Cisco TelePresence System Serie MXP Software anterior a F9.3.1 permite a atacantes remotos causar una denegación de servicio (reinicio de dispositivo) a través de paquetes manipulados, también conocido como Bug ID CSCtq78722. • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140430-mxp • CWE-20: Improper Input Validation •

CVSS: 7.8EPSS: 0%CPEs: 22EXPL: 0

CVE-2014-2160

https://notcve.org/view.php?id=CVE-2014-2160

02 May 2014 — The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted packets, aka Bug ID CSCty45745. El subsistema H.225 en Cisco TelePresence System Serie MXP Software anterior a F9.3.1 permite a atacantes remotos causar una denegación de servicio (reinicio de dispositivo) a través de paquetes manipulados, también conocido como Bug ID CSCty45745. • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140430-mxp • CWE-20: Improper Input Validation •

CVSS: 7.8EPSS: 0%CPEs: 22EXPL: 0

CVE-2014-2161

https://notcve.org/view.php?id=CVE-2014-2161

02 May 2014 — The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted packets, aka Bug ID CSCty45731. El subsistema H.225 en Cisco TelePresence System Serie MXP Software anterior a F9.3.1 permite a atacantes remotos causar una denegación de servicio (reinicio de dispositivo) a través de paquetes manipulados, también conocido como Bug ID CSCty45731. • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140430-mxp • CWE-20: Improper Input Validation •

CVSS: 9.8EPSS: 5%CPEs: 39EXPL: 0

CVE-2014-0661

https://notcve.org/view.php?id=CVE-2014-0661

22 Jan 2014 — The System Status Collection Daemon (SSCD) in Cisco TelePresence System 500-37, 1000, 1300-65, and 3xxx before 1.10.2(42), and 500-32, 1300-47, TX1310 65, and TX9xxx before 6.0.4(11), allows remote attackers to execute arbitrary commands or cause a denial of service (stack memory corruption) via a crafted XML-RPC message, aka Bug ID CSCui32796. El System Status Collection Daemon (SSCD) de Cisco TelePresence System 500-37, 1000, 1300-65, y 3xxx anterior a la versión 1.10.2(42), y 500-32, 1300-47, TX1310 65, ... • http://osvdb.org/102362 • CWE-94: Improper Control of Generation of Code ('Code Injection') •

CVSS: 10.0EPSS: 0%CPEs: 84EXPL: 0

CVE-2013-3454

https://notcve.org/view.php?id=CVE-2013-3454

08 Aug 2013 — Cisco TelePresence System Software 1.10.1 and earlier on 500, 13X0, 1X00, 30X0, and 3X00 devices, and 6.0.3 and earlier on TX 9X00 devices, has a default password for the pwrecovery account, which makes it easier for remote attackers to modify the configuration or perform arbitrary actions via HTTPS requests, aka Bug ID CSCui43128. Cisco TelePresence System Software v1.10.1 y anteriores en dispositivos 500, 13X0, 1X00, 30X0, y 3X00, y v6.0.3 y anteriores en dispositivos TX 9X00, tiene una contraseña predete... • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130807-tp • CWE-255: Credentials Management Errors •