cisco telepresence system 3000 vulnerabilities and exploits

(subscribe to this query)

9

CVSSv2

The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x up to and including 1.5.x allows remote authenticated users to execute arbitrary commands via a malformed request, related to "command injection vulnerabilities," aka Bug ID CSCtb31659.

Cisco Telepresence System Software 1.4.7 Cisco Telepresence System Software 1.3.2 Cisco Telepresence System Software 1.5.13 Cisco Telepresence System Software 1.5.3 Cisco Telepresence System Software 1.5.1 Cisco Telepresence System Software 1.2.3 Cisco Telepresence System Software 1.5.10 Cisco Telepresence System Software 1.5.11 Cisco Telepresence System Software 1.5.12 Cisco Telepresence System 1100 Cisco Telepresence System 1000 Cisco Telepresence System 3000 Cisco Telepresence System 1300 Series Cisco Telepresence System 3200 Series Cisco Telepresence System 500 Series

10

CVSSv2

The TFTP implementation on Cisco TelePresence endpoint devices with software 1.2.x up to and including 1.5.x, 1.6.0, and 1.6.1 allows remote malicious users to obtain sensitive information via a GET request, aka Bug ID CSCte43876.

Cisco Telepresence System Software 1.2.3 Cisco Telepresence System Software 1.5.10 Cisco Telepresence System Software 1.5.13 Cisco Telepresence System Software 1.5.3 Cisco Telepresence System Software 1.5.1 Cisco Telepresence System Software 1.5.11 Cisco Telepresence System Software 1.5.12 Cisco Telepresence System Software 1.4.7 Cisco Telepresence System Software 1.3.2 Cisco Telepresence System 1000 Cisco Telepresence System 1100 Cisco Telepresence System 3000 Cisco Telepresence System 1300 Series Cisco Telepresence System 3200 Series Cisco Telepresence System Software 1.6.1 Cisco Telepresence System Software 1.6.0 Cisco Telepresence System 500 Series

9

CVSSv2

The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x up to and including 1.6.x allows remote authenticated users to execute arbitrary commands via a malformed request, related to "command injection vulnerabilities," aka Bug ID CSCth24671.

Cisco Telepresence System Software 1.3.2 Cisco Telepresence System Software 1.5.3 Cisco Telepresence System Software 1.6.8 Cisco Telepresence System Software 1.6.5 Cisco Telepresence System Software 1.5.13 Cisco Telepresence System Software 1.5.11 Cisco Telepresence System Software 1.5.1 Cisco Telepresence System Software 1.6.0 Cisco Telepresence System Software 1.5.10 Cisco Telepresence System Software 1.4.7 Cisco Telepresence System Software 1.6.4 Cisco Telepresence System Software 1.6.6 Cisco Telepresence System Software 1.6.7 Cisco Telepresence System Software 1.5.12 Cisco Telepresence System Software 1.2.3 Cisco Telepresence System Software 1.6.2 Cisco Telepresence System Software 1.6.3 Cisco Telepresence System 1000 Cisco Telepresence System 1100 Cisco Telepresence System 3000 Cisco Telepresence System 1300 Series Cisco Telepresence System 3200 Series

7.8

CVSSv2

Cisco TelePresence endpoint devices with software 1.2.x up to and including 1.6.x allow remote malicious users to cause a denial of service (service crash) via a malformed SOAP request in conjunction with a spoofed TelePresence Manager that supplies an invalid IP address, aka Bug...

Cisco Telepresence System Software 1.2.3 Cisco Telepresence System Software 1.5.10 Cisco Telepresence System Software 1.6.3 Cisco Telepresence System Software 1.6.4 Cisco Telepresence System Software 1.5.13 Cisco Telepresence System Software 1.5.3 Cisco Telepresence System Software 1.5.1 Cisco Telepresence System Software 1.6.5 Cisco Telepresence System Software 1.5.11 Cisco Telepresence System Software 1.5.12 Cisco Telepresence System Software 1.6.0 Cisco Telepresence System Software 1.6.2 Cisco Telepresence System Software 1.4.7 Cisco Telepresence System Software 1.3.2 Cisco Telepresence System Software 1.6.6 Cisco Telepresence System Software 1.6.7 Cisco Telepresence System Software 1.6.8 Cisco Telepresence System 1000 Cisco Telepresence System 1100 Cisco Telepresence System 3000 Cisco Telepresence System 1300 Series Cisco Telepresence System 3200 Series

5

CVSSv2

An integer overflow can occur in NTP-dev.4.3.70 leading to an out-of-bounds memory copy operation when processing a specially crafted private mode packet. The crafted packet needs to have the correct message authentication code and a valid timestamp. When processed by the NTP dae...

Ntp Ntp-dev 4.3.70

6.5

CVSSv2

Use-after-free vulnerability in ntpd in NTP 4.2.x prior to 4.2.8p4, and 4.3.x prior to 4.3.77 allows remote authenticated users to possibly execute arbitrary code or cause a denial of service (crash) via crafted packets.

Ntp Ntp Ntp Ntp 4.2.8 Netapp Oncommand Balance -Netapp Oncommand Performance Manager -Netapp Oncommand Unified Manager -Netapp Clustered Data Ontap -Netapp Data Ontap -

3.5

CVSSv2

Directory traversal vulnerability in the save_config function in ntpd in ntp_control.c in NTP prior to 4.2.8p4, when used on systems that do not use '\' or '/' characters for directory separation such as OpenVMS, allows remote authenticated users to overwrite ...

Ntp Ntp Ntp Ntp 4.2.8

7.5

CVSSv2

The datalen parameter in the refclock driver in NTP 4.2.x prior to 4.2.8p4, and 4.3.x prior to 4.3.77 allows remote malicious users to execute arbitrary code or cause a denial of service (crash) via a negative input value.

Ntp Ntp Ntp Ntp 4.2.8 Netapp Oncommand Balance -Netapp Oncommand Performance Manager -Netapp Oncommand Unified Manager -Netapp Clustered Data Ontap -Netapp Data Ontap -

6.5

CVSSv2

Buffer overflow in the password management functionality in NTP 4.2.x prior to 4.2.8p4, and 4.3.x prior to 4.3.77 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted key file.

Ntp Ntp Ntp Ntp 4.2.8 Netapp Oncommand Balance -Netapp Oncommand Performance Manager -Netapp Oncommand Unified Manager -Netapp Clustered Data Ontap -Netapp Data Ontap -

5

CVSSv2

ntpq in NTP prior to 4.2.8p7 allows remote malicious users to obtain origin timestamps and then impersonate peers via unspecified vectors.

Ntp Ntp

Get Started

« PREV 1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook