cisco telepresence system software 1.4.7 vulnerabilities and exploits

(subscribe to this query)

4.3

CVSSv2

Cisco TelePresence System (CTS) 6.0(.5)(5) and previous versions falls back to HTTP when certain HTTPS sessions cannot be established, which allows man-in-the-middle malicious users to obtain sensitive directory information by leveraging a network position between CTS and Cisco U...

Cisco Telepresence System Software 1.5.1\\(2082\\)Cisco Telepresence System Software 1.5.10\\(3648\\)Cisco Telepresence System Software 1.5.11\\(3659\\)Cisco Telepresence System Software 1.5.12\\(3701\\)Cisco Telepresence System Software 1.7.1\\(4864\\)Cisco Telepresence System Software 1.7.2\\(4937\\)Cisco Telepresence System Software 1.7.2.1\\(2\\)Cisco Telepresence System Software 1.7.4\\(270\\)Cisco Telepresence System Software 1.7.5\\(42\\)Cisco Telepresence System Software 1.9.3 Cisco Telepresence System Software 1.9.3\\(44\\)Cisco Telepresence System Software 1.9.4 Cisco Telepresence System Software 1.9.4\\(19\\)Cisco Telepresence System Software 1.10.3\\(41\\)Cisco Telepresence System Software 1.3.2\\(1393\\)Cisco Telepresence System Software 1.5.3\\(2115\\)Cisco Telepresence System Software 1.6.2\\(4023\\)Cisco Telepresence System Software 1.6.7\\(4212\\)Cisco Telepresence System Software 1.7.0.1\\(4764\\)Cisco Telepresence System Software 1.7.6\\(4\\)Cisco Telepresence System Software 1.8.1\\(34\\)Cisco Telepresence System Software 1.9.1\\(68\\)

9

CVSSv2

The administrative web interface on Cisco TelePresence Immersive Endpoint Devices prior to 1.7.4 allows remote authenticated users to execute arbitrary commands via a malformed request on TCP port 443, aka Bug ID CSCtn99724.

Cisco Telepresence System Software 1.7.0.1\\(4764\\)Cisco Telepresence System Software 1.6.7\\(4212\\)Cisco Telepresence System Software 1.5.3\\(2115\\)Cisco Telepresence System Software 1.5.12\\(3701\\)Cisco Telepresence System Software Cisco Telepresence System Software 1.7.2.1\\(2\\)Cisco Telepresence System Software 1.7.1\\(4864\\)Cisco Telepresence System Software 1.7.0.2\\(4719\\)Cisco Telepresence System Software 1.5.10\\(3648\\)Cisco Telepresence System Software 1.5.1\\(2082\\)Cisco Telepresence System Software 1.4.7\\(2229\\)Cisco Telepresence System Software 1.3.2\\(1393\\)Cisco Telepresence System Software 1.6.8\\(4222\\)Cisco Telepresence System Software 1.6.6\\(4109\\)Cisco Telepresence System Software 1.6.0\\(3954\\)Cisco Telepresence System Software 1.5.13\\(3717\\)Cisco Telepresence System Software 1.5.11\\(3659\\)Cisco Telepresence System Software 1.2.3\\(1101\\)Cisco Telepresence System Software 1.6.5\\(4097\\)Cisco Telepresence System Software 1.6.4\\(4072\\)Cisco Telepresence System Software 1.6.3\\(4042\\)Cisco Telepresence System Software 1.6.2\\(4023\\)

8.3

CVSSv2

An unspecified API on Cisco TelePresence Immersive Endpoint Devices prior to 1.9.1 allows remote malicious users to execute arbitrary commands by leveraging certain adjacency and sending a malformed request on TCP port 61460, aka Bug ID CSCtz38382.

Cisco Telepresence System Software 1.9.0\\(46\\)Cisco Telepresence System Software 1.7.5\\(42\\)Cisco Telepresence System Software 1.7.2.1\\(2\\)Cisco Telepresence System Software 1.7.1\\(4864\\)Cisco Telepresence System Software 1.6.6\\(4109\\)Cisco Telepresence System Software 1.6.4\\(4072\\)Cisco Telepresence System Software 1.5.11\\(3659\\)Cisco Telepresence System Software 1.5.1\\(2082\\)Cisco Telepresence System Software 1.8.2\\(11\\)Cisco Telepresence System Software 1.8.1\\(34\\)Cisco Telepresence System Software 1.8.0\\(55\\)Cisco Telepresence System Software 1.7.6\\(4\\)Cisco Telepresence System Software 1.6.2\\(4023\\)Cisco Telepresence System Software 1.6.0\\(3954\\)Cisco Telepresence System Software 1.5.3\\(2115\\)Cisco Telepresence System Software 1.5.13\\(3717\\)Cisco Telepresence System Software 1.7.0.2\\(4719\\)Cisco Telepresence System Software 1.7.0.1\\(4764\\)Cisco Telepresence System Software 1.6.8\\(4222\\)Cisco Telepresence System Software 1.6.7\\(4212\\)Cisco Telepresence System Software 1.4.7\\(2229\\)Cisco Telepresence System Software 1.3.2\\(1393\\)

8.3

CVSSv2

The Cisco Discovery Protocol (CDP) implementation on Cisco TelePresence Multipoint Switch prior to 1.9.0, Cisco TelePresence Immersive Endpoint Devices prior to 1.9.1, Cisco TelePresence Manager prior to 1.9.0, and Cisco TelePresence Recording Server prior to 1.8.1 allows remote ...

Cisco Telepresence Multipoint Switch Software 1.5.0 Cisco Telepresence Multipoint Switch Software 1.6.1 Cisco Telepresence Multipoint Switch Software 1.5.6 Cisco Telepresence Multipoint Switch Software 1.5.3 Cisco Telepresence Multipoint Switch Software 1.7.0.1\\(5\\)Cisco Telepresence Multipoint Switch Software 1.7.2\\(75\\)Cisco Telepresence Multipoint Switch Software 1.8.2\\(2\\)Cisco Telepresence Multipoint Switch Software 1.6.4\\(3\\)Cisco Telepresence Multipoint Switch Software 1.5.4\\(4\\)Cisco Telepresence Multipoint Switch Software 1.5.2\\(21\\)Cisco Telepresence Multipoint Switch Software Cisco Telepresence Multipoint Switch Software 1.6.0 Cisco Telepresence Multipoint Switch Software 1.5.4 Cisco Telepresence Multipoint Switch Software 1.5.5 Cisco Telepresence Multipoint Switch Software 1.5.2 Cisco Telepresence Multipoint Switch Software 1.6.2\\(3\\)Cisco Telepresence Multipoint Switch Software 1.6.1\\(2\\)Cisco Telepresence Multipoint Switch Software 1.6.0\\(108\\)Cisco Telepresence Multipoint Switch Software 1.5.6\\(1\\)Cisco Telepresence Multipoint Switch Software 1.1.1 Cisco Telepresence Multipoint Switch Software 1.1.0 Cisco Telepresence Multipoint Switch Software 1.0.4.0

8.3

CVSSv2

The XML-RPC implementation on Cisco TelePresence endpoint devices with software 1.2.x up to and including 1.5.x allows remote malicious users to execute arbitrary commands via a TCP request, related to a "command injection vulnerability," aka Bug ID CSCtb52587.

Cisco Telepresence System Software 1.5.12 Cisco Telepresence System Software 1.2.3 Cisco Telepresence System Software 1.5.10 Cisco Telepresence System Software 1.4.7 Cisco Telepresence System Software 1.3.2 Cisco Telepresence System Software 1.5.3 Cisco Telepresence System Software 1.5.13 Cisco Telepresence System Software 1.5.11 Cisco Telepresence System Software 1.5.1 Cisco Telepresence System 1100 Cisco Telepresence System 1000 Cisco Telepresence System 3000 Cisco Telepresence System 1300 Series Cisco Telepresence System 3200 Series Cisco Telepresence System 500 Series

10

CVSSv2

The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x up to and including 1.5.x allows remote malicious users to execute arbitrary commands via a malformed request, related to "command injection vulnerabilities," aka Bug ID CSCtb31640.

Cisco Telepresence System Software 1.5.11 Cisco Telepresence System Software 1.5.12 Cisco Telepresence System Software 1.2.3 Cisco Telepresence System Software 1.5.10 Cisco Telepresence System Software 1.4.7 Cisco Telepresence System Software 1.3.2 Cisco Telepresence System Software 1.5.13 Cisco Telepresence System Software 1.5.3 Cisco Telepresence System Software 1.5.1 Cisco Telepresence System 1000 Cisco Telepresence System 1100 Cisco Telepresence System 3000 Cisco Telepresence System 1300 Series Cisco Telepresence System 3200 Series Cisco Telepresence System 500 Series

9

CVSSv2

The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x up to and including 1.5.x allows remote authenticated users to execute arbitrary commands via a malformed request, related to "command injection vulnerabilities," aka Bug ID CSCtb31685.

Cisco Telepresence System Software 1.5.10 Cisco Telepresence System Software 1.4.7 Cisco Telepresence System Software 1.5.13 Cisco Telepresence System Software 1.5.11 Cisco Telepresence System Software 1.5.1 Cisco Telepresence System Software 1.5.12 Cisco Telepresence System Software 1.2.3 Cisco Telepresence System Software 1.3.2 Cisco Telepresence System Software 1.5.3 Cisco Telepresence System 1000 Cisco Telepresence System 1100 Cisco Telepresence System 3000 Cisco Telepresence System 1300 Series Cisco Telepresence System 3200 Series Cisco Telepresence System 500 Series

9

CVSSv2

The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x up to and including 1.5.x allows remote authenticated users to execute arbitrary commands via a malformed request, related to "command injection vulnerabilities," aka Bug ID CSCtb31659.

Cisco Telepresence System Software 1.4.7 Cisco Telepresence System Software 1.3.2 Cisco Telepresence System Software 1.5.13 Cisco Telepresence System Software 1.5.3 Cisco Telepresence System Software 1.5.1 Cisco Telepresence System Software 1.2.3 Cisco Telepresence System Software 1.5.10 Cisco Telepresence System Software 1.5.11 Cisco Telepresence System Software 1.5.12 Cisco Telepresence System 1100 Cisco Telepresence System 1000 Cisco Telepresence System 3000 Cisco Telepresence System 1300 Series Cisco Telepresence System 3200 Series Cisco Telepresence System 500 Series

10

CVSSv2

The TFTP implementation on Cisco TelePresence endpoint devices with software 1.2.x up to and including 1.5.x, 1.6.0, and 1.6.1 allows remote malicious users to obtain sensitive information via a GET request, aka Bug ID CSCte43876.

Cisco Telepresence System Software 1.2.3 Cisco Telepresence System Software 1.5.10 Cisco Telepresence System Software 1.5.13 Cisco Telepresence System Software 1.5.3 Cisco Telepresence System Software 1.5.1 Cisco Telepresence System Software 1.5.11 Cisco Telepresence System Software 1.5.12 Cisco Telepresence System Software 1.4.7 Cisco Telepresence System Software 1.3.2 Cisco Telepresence System 1000 Cisco Telepresence System 1100 Cisco Telepresence System 3000 Cisco Telepresence System 1300 Series Cisco Telepresence System 3200 Series Cisco Telepresence System Software 1.6.1 Cisco Telepresence System Software 1.6.0 Cisco Telepresence System 500 Series

7.9

CVSSv2

Buffer overflow on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 1.6.x; Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x; Cisco TelePresence endpoint devices with software 1.2.x up to and including 1.6.x...

Cisco Adaptive Security Appliance Software 1.6.0 Cisco Asa 5500 Cisco 5500 Series Adaptive Security Appliance Cisco Telepresence Multipoint Switch Software 1.0.4.0 Cisco Telepresence Multipoint Switch Software 1.1.0 Cisco Telepresence Multipoint Switch Software 1.5.4 Cisco Telepresence Multipoint Switch Software 1.5.5 Cisco Telepresence Multipoint Switch Software 1.1.1 Cisco Telepresence Multipoint Switch Software 1.1.2 Cisco Telepresence Multipoint Switch Software 1.5.6 Cisco Telepresence Multipoint Switch Software 1.6.0 Cisco Telepresence Multipoint Switch Software 1.5.2 Cisco Telepresence Multipoint Switch Software 1.5.3 Cisco Telepresence Multipoint Switch Software 1.6.3 Cisco Telepresence Multipoint Switch Software 1.6.4 Cisco Telepresence Multipoint Switch Software 1.5.0 Cisco Telepresence Multipoint Switch Software 1.5.1 Cisco Telepresence Multipoint Switch Software 1.6.1 Cisco Telepresence Multipoint Switch Software 1.6.2 Cisco Telepresence Multipoint Switch Cisco Telepresence System Software 1.4.7 Cisco Telepresence System Software 1.3.2

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook