Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cisco telepresence collaboration endpoint 8.3.5 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2023-20008
A vulnerability in the CLI of Cisco TelePresence CE and RoomOS Software could allow an authenticated, local malicious user to overwrite arbitrary files on the local system of an affected device. This vulnerability is due to improper access controls on files that are in the local ...
Cisco Roomos 10.3.2.0Cisco Roomos 10.3.4.0Cisco Roomos 10.8.2.5Cisco Roomos 10.11.5.2Cisco Roomos 10.8.4.0Cisco Roomos 10.11.3.0Cisco Roomos 10.15.3.0Cisco Telepresence Collaboration Endpoint 8.1.1Cisco Telepresence Collaboration Endpoint 8.3.0Cisco Telepresence Collaboration Endpoint 8.3.5Cisco Telepresence Collaboration Endpoint 9.0.1Cisco Telepresence Collaboration Endpoint 9.1.1Cisco Telepresence Collaboration Endpoint 9.1.2Cisco Telepresence Collaboration Endpoint 9.1.3Cisco Telepresence Collaboration Endpoint 9.1.4Cisco Telepresence Collaboration Endpoint 9.1.5Cisco Telepresence Collaboration Endpoint 9.1.6Cisco Telepresence Collaboration Endpoint 9.10.1Cisco Telepresence Collaboration Endpoint 9.10.2Cisco Telepresence Collaboration Endpoint 9.10.3Cisco Telepresence Collaboration Endpoint 9.12.4Cisco Telepresence Collaboration Endpoint 9.12.5
NA
CVE-2023-20002
A vulnerability in Cisco TelePresence CE and RoomOS Software could allow an authenticated, local malicious user to bypass access controls and conduct an SSRF attack through an affected device. This vulnerability is due to improper validation of user-supplied input. An attacker co...
Cisco Roomos 10.3.2.0Cisco Roomos 10.3.4.0Cisco Roomos 10.8.2.5Cisco Roomos 10.11.5.2Cisco Roomos 10.8.4.0Cisco Roomos 10.11.3.0Cisco Roomos 10.15.3.0Cisco Telepresence Collaboration Endpoint 8.1.1Cisco Telepresence Collaboration Endpoint 8.3.0Cisco Telepresence Collaboration Endpoint 8.3.5Cisco Telepresence Collaboration Endpoint 9.0.1Cisco Telepresence Collaboration Endpoint 9.1.1Cisco Telepresence Collaboration Endpoint 9.1.2Cisco Telepresence Collaboration Endpoint 9.1.3Cisco Telepresence Collaboration Endpoint 9.1.4Cisco Telepresence Collaboration Endpoint 9.1.5Cisco Telepresence Collaboration Endpoint 9.1.6Cisco Telepresence Collaboration Endpoint 9.10.1Cisco Telepresence Collaboration Endpoint 9.10.2Cisco Telepresence Collaboration Endpoint 9.10.3Cisco Telepresence Collaboration Endpoint 9.12.4Cisco Telepresence Collaboration Endpoint 9.12.5
5
CVSSv2
CVE-2017-3733
During a renegotiation handshake if the Encrypt-Then-Mac extension is negotiated where it was not in the original handshake (or vice-versa) then this can cause OpenSSL 1.1.0 prior to 1.1.0e to crash (dependent on ciphersuite). Both clients and servers are affected.
Openssl Openssl 1.1.0Openssl Openssl 1.1.0cOpenssl Openssl 1.1.0dOpenssl Openssl 1.1.0aOpenssl Openssl 1.1.0bHp Operations Agent 11.15Hp Operations Agent 11.14
5
CVSSv2
CVE-2017-3730
In OpenSSL 1.1.0 prior to 1.1.0d, if a malicious server supplies bad parameters for a DHE or ECDHE key exchange then this can result in the client attempting to dereference a NULL pointer leading to a client crash. This could be exploited in a Denial of Service attack.
Openssl Openssl 1.1.0cOpenssl Openssl 1.1.0Openssl Openssl 1.1.0bOpenssl Openssl 1.1.0aOracle Agile Engineering Data Management 6.2.0Oracle Jd Edwards World Security A9.2Oracle Communications Eagle Lnp Application Processor 10.1Oracle Communications Application Session Controller 3.7.1Oracle Jd Edwards World Security A9.4Oracle Jd Edwards Enterpriseone Tools 9.2Oracle Communications Operations Monitor 3.4Oracle Communications Operations Monitor 4.0Oracle Agile Engineering Data Management 6.1.3Oracle Jd Edwards World Security A9.1Oracle Jd Edwards World Security A9.3Oracle Communications Eagle Lnp Application Processor 10.0Oracle Communications Eagle Lnp Application Processor 10.2Oracle Communications Application Session Controller 3.8.0
5
CVSSv2
CVE-2016-2180
The TS_OBJ_print_bio function in crypto/ts/ts_lib.c in the X.509 Public Key Infrastructure Time-Stamp Protocol (TSP) implementation in OpenSSL up to and including 1.0.2h allows remote malicious users to cause a denial of service (out-of-bounds read and application crash) via a cr...
Openssl Openssl 1.0.1mOpenssl Openssl 1.0.2aOpenssl Openssl 1.0.1jOpenssl Openssl 1.0.1hOpenssl Openssl 1.0.2eOpenssl Openssl 1.0.1rOpenssl Openssl 1.0.2bOpenssl Openssl 1.0.1cOpenssl Openssl 1.0.1gOpenssl Openssl 1.0.2gOpenssl Openssl 1.0.1aOpenssl Openssl 1.0.2hOpenssl Openssl 1.0.1dOpenssl Openssl 1.0.1tOpenssl Openssl 1.0.2cOpenssl Openssl 1.0.1pOpenssl Openssl 1.0.1kOpenssl Openssl 1.0.1bOpenssl Openssl 1.0.1nOpenssl Openssl 1.0.1qOpenssl Openssl 1.0.1eOpenssl Openssl 1.0.1l
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
encryptionCVE-2024-4331CVE-2024-26925arbitrary codeCVE-2006-4304CVE-2024-25458CVE-2024-27077reflected XSSCVE-2024-4059
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook