cisco telepresence multipoint switch software 1.5.3 vulnerabilities and exploits

(subscribe to this query)

7.9

CVSSv2

Buffer overflow on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 1.6.x; Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x; Cisco TelePresence endpoint devices with software 1.2.x up to and including 1.6.x...

Cisco Adaptive Security Appliance Software 1.6.0 Cisco Asa 5500 Cisco 5500 Series Adaptive Security Appliance Cisco Telepresence Multipoint Switch Software 1.0.4.0 Cisco Telepresence Multipoint Switch Software 1.1.0 Cisco Telepresence Multipoint Switch Software 1.5.4 Cisco Telepresence Multipoint Switch Software 1.5.5 Cisco Telepresence Multipoint Switch Software 1.1.1 Cisco Telepresence Multipoint Switch Software 1.1.2 Cisco Telepresence Multipoint Switch Software 1.5.6 Cisco Telepresence Multipoint Switch Software 1.6.0 Cisco Telepresence Multipoint Switch Software 1.5.2 Cisco Telepresence Multipoint Switch Software 1.5.3 Cisco Telepresence Multipoint Switch Software 1.6.3 Cisco Telepresence Multipoint Switch Software 1.6.4 Cisco Telepresence Multipoint Switch Software 1.5.0 Cisco Telepresence Multipoint Switch Software 1.5.1 Cisco Telepresence Multipoint Switch Software 1.6.1 Cisco Telepresence Multipoint Switch Software 1.6.2 Cisco Telepresence Multipoint Switch Cisco Telepresence System Software 1.4.7 Cisco Telepresence System Software 1.3.2

10

CVSSv2

The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x up to and including 1.5.x allows remote malicious users to execute arbitrary commands via a malformed request, related to "command injection vulnerabilities," aka Bug ID CSCtb31640.

Cisco Telepresence System Software 1.5.11 Cisco Telepresence System Software 1.5.12 Cisco Telepresence System Software 1.2.3 Cisco Telepresence System Software 1.5.10 Cisco Telepresence System Software 1.4.7 Cisco Telepresence System Software 1.3.2 Cisco Telepresence System Software 1.5.13 Cisco Telepresence System Software 1.5.3 Cisco Telepresence System Software 1.5.1 Cisco Telepresence System 1000 Cisco Telepresence System 1100 Cisco Telepresence System 3000 Cisco Telepresence System 1300 Series Cisco Telepresence System 3200 Series Cisco Telepresence System 500 Series

9

CVSSv2

The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x up to and including 1.5.x allows remote authenticated users to execute arbitrary commands via a malformed request, related to "command injection vulnerabilities," aka Bug ID CSCtb31685.

Cisco Telepresence System Software 1.5.10 Cisco Telepresence System Software 1.4.7 Cisco Telepresence System Software 1.5.13 Cisco Telepresence System Software 1.5.11 Cisco Telepresence System Software 1.5.1 Cisco Telepresence System Software 1.5.12 Cisco Telepresence System Software 1.2.3 Cisco Telepresence System Software 1.3.2 Cisco Telepresence System Software 1.5.3 Cisco Telepresence System 1000 Cisco Telepresence System 1100 Cisco Telepresence System 3000 Cisco Telepresence System 1300 Series Cisco Telepresence System 3200 Series Cisco Telepresence System 500 Series

9

CVSSv2

The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x up to and including 1.5.x allows remote authenticated users to execute arbitrary commands via a malformed request, related to "command injection vulnerabilities," aka Bug ID CSCtb31659.

Cisco Telepresence System Software 1.4.7 Cisco Telepresence System Software 1.3.2 Cisco Telepresence System Software 1.5.13 Cisco Telepresence System Software 1.5.3 Cisco Telepresence System Software 1.5.1 Cisco Telepresence System Software 1.2.3 Cisco Telepresence System Software 1.5.10 Cisco Telepresence System Software 1.5.11 Cisco Telepresence System Software 1.5.12 Cisco Telepresence System 1100 Cisco Telepresence System 1000 Cisco Telepresence System 3000 Cisco Telepresence System 1300 Series Cisco Telepresence System 3200 Series Cisco Telepresence System 500 Series

8.3

CVSSv2

The XML-RPC implementation on Cisco TelePresence endpoint devices with software 1.2.x up to and including 1.5.x allows remote malicious users to execute arbitrary commands via a TCP request, related to a "command injection vulnerability," aka Bug ID CSCtb52587.

Cisco Telepresence System Software 1.5.12 Cisco Telepresence System Software 1.2.3 Cisco Telepresence System Software 1.5.10 Cisco Telepresence System Software 1.4.7 Cisco Telepresence System Software 1.3.2 Cisco Telepresence System Software 1.5.3 Cisco Telepresence System Software 1.5.13 Cisco Telepresence System Software 1.5.11 Cisco Telepresence System Software 1.5.1 Cisco Telepresence System 1100 Cisco Telepresence System 1000 Cisco Telepresence System 3000 Cisco Telepresence System 1300 Series Cisco Telepresence System 3200 Series Cisco Telepresence System 500 Series

10

CVSSv2

The TFTP implementation on Cisco TelePresence endpoint devices with software 1.2.x up to and including 1.5.x, 1.6.0, and 1.6.1 allows remote malicious users to obtain sensitive information via a GET request, aka Bug ID CSCte43876.

Cisco Telepresence System Software 1.2.3 Cisco Telepresence System Software 1.5.10 Cisco Telepresence System Software 1.5.13 Cisco Telepresence System Software 1.5.3 Cisco Telepresence System Software 1.5.1 Cisco Telepresence System Software 1.5.11 Cisco Telepresence System Software 1.5.12 Cisco Telepresence System Software 1.4.7 Cisco Telepresence System Software 1.3.2 Cisco Telepresence System 1000 Cisco Telepresence System 1100 Cisco Telepresence System 3000 Cisco Telepresence System 1300 Series Cisco Telepresence System 3200 Series Cisco Telepresence System Software 1.6.1 Cisco Telepresence System Software 1.6.0 Cisco Telepresence System 500 Series

9

CVSSv2

The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x up to and including 1.6.x allows remote authenticated users to execute arbitrary commands via a malformed request, related to "command injection vulnerabilities," aka Bug ID CSCth24671.

Cisco Telepresence System Software 1.3.2 Cisco Telepresence System Software 1.5.3 Cisco Telepresence System Software 1.6.8 Cisco Telepresence System Software 1.6.5 Cisco Telepresence System Software 1.5.13 Cisco Telepresence System Software 1.5.11 Cisco Telepresence System Software 1.5.1 Cisco Telepresence System Software 1.6.0 Cisco Telepresence System Software 1.5.10 Cisco Telepresence System Software 1.4.7 Cisco Telepresence System Software 1.6.4 Cisco Telepresence System Software 1.6.6 Cisco Telepresence System Software 1.6.7 Cisco Telepresence System Software 1.5.12 Cisco Telepresence System Software 1.2.3 Cisco Telepresence System Software 1.6.2 Cisco Telepresence System Software 1.6.3 Cisco Telepresence System 1000 Cisco Telepresence System 1100 Cisco Telepresence System 3000 Cisco Telepresence System 1300 Series Cisco Telepresence System 3200 Series

7.8

CVSSv2

Cisco TelePresence endpoint devices with software 1.2.x up to and including 1.6.x allow remote malicious users to cause a denial of service (service crash) via a malformed SOAP request in conjunction with a spoofed TelePresence Manager that supplies an invalid IP address, aka Bug...

Cisco Telepresence System Software 1.2.3 Cisco Telepresence System Software 1.5.10 Cisco Telepresence System Software 1.6.3 Cisco Telepresence System Software 1.6.4 Cisco Telepresence System Software 1.5.13 Cisco Telepresence System Software 1.5.3 Cisco Telepresence System Software 1.5.1 Cisco Telepresence System Software 1.6.5 Cisco Telepresence System Software 1.5.11 Cisco Telepresence System Software 1.5.12 Cisco Telepresence System Software 1.6.0 Cisco Telepresence System Software 1.6.2 Cisco Telepresence System Software 1.4.7 Cisco Telepresence System Software 1.3.2 Cisco Telepresence System Software 1.6.6 Cisco Telepresence System Software 1.6.7 Cisco Telepresence System Software 1.6.8 Cisco Telepresence System 1000 Cisco Telepresence System 1100 Cisco Telepresence System 3000 Cisco Telepresence System 1300 Series Cisco Telepresence System 3200 Series

2.6

CVSSv2

The ssl3_get_client_key_exchange function in s3_srvr.c in OpenSSL 1.0.2 prior to 1.0.2a, when client authentication and an ephemeral Diffie-Hellman ciphersuite are enabled, allows remote malicious users to cause a denial of service (daemon crash) via a ClientKeyExchange message w...

Openssl Openssl 1.0.2

5

CVSSv2

The multi-block feature in the ssl3_write_bytes function in s3_pkt.c in OpenSSL 1.0.2 prior to 1.0.2a on 64-bit x86 platforms with AES NI support does not properly handle certain non-blocking I/O cases, which allows remote malicious users to cause a denial of service (pointer cor...

Openssl Openssl 1.0.2

Get Started

« PREV 1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook