CVE-2014-0661
Summary
| CVE | CVE-2014-0661 |
|---|---|
| State | PUBLISHED |
| Assigner | cisco |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2014-01-22 21:55:03 UTC |
| Updated | 2026-04-29 01:13:23 UTC |
| Description | The System Status Collection Daemon (SSCD) in Cisco TelePresence System 500-37, 1000, 1300-65, and 3xxx before 1.10.2(42), and 500-32, 1300-47, TX1310 65, and TX9xxx before 6.0.4(11), allows remote attackers to execute arbitrary commands or cause a denial of service (stack memory corruption) via a crafted XML-RPC message, aka Bug ID CSCui32796. |
Risk And Classification
Primary CVSS: v2.0 8.3 from [email protected]
AV:A/AC:L/Au:N/C:C/I:C/A:C
EPSS: 0.040420000 probability, percentile 0.885450000 (date 2026-05-03)
Problem Types: CWE-94 | n/a
CVSS v2.0 Breakdown
Access Vector
AdjacentAccess Complexity
LowAuthentication
NoneConfidentiality
CompleteIntegrity
CompleteAvailability
CompleteAV:A/AC:L/Au:N/C:C/I:C/A:C
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Cisco | Telepresence System 1000 | - | All | All | All |
| Hardware | Cisco | Telepresence System 1100 | - | All | All | All |
| Hardware | Cisco | Telepresence System 1300-65 | - | All | All | All |
| Hardware | Cisco | Telepresence System 3000 | All | All | All | All |
| Hardware | Cisco | Telepresence System 3010 | All | All | All | All |
| Hardware | Cisco | Telepresence System 3200 | All | All | All | All |
| Hardware | Cisco | Telepresence System 3210 | All | All | All | All |
| Hardware | Cisco | Telepresence System 500-32 | - | All | All | All |
| Hardware | Cisco | Telepresence System 500-37 | - | All | All | All |
| Application | Cisco | Telepresence System Software | 1.10.0 | All | All | All |
| Application | Cisco | Telepresence System Software | 1.10.0\(259\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.10.1 | All | All | All |
| Application | Cisco | Telepresence System Software | 1.5.10\(3648\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.7.5\(42\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.7.6\(4\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.8.0\(55\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.8.1\(34\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.8.2\(11\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.8.3\(4\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.8.4\(13\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.8.5\(4\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.9.0\(46\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.9.1\(68\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.9.2\(19\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.9.3\(44\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.9.4\(19\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.9.5\(7\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.9.6.1\(3\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.9.6\(2\) | All | All | All |
| Application | Cisco | Telepresence System Software | 6.0.0.1\(4\) | All | All | All |
| Application | Cisco | Telepresence System Software | 6.0.1\(50\) | All | All | All |
| Application | Cisco | Telepresence System Software | 6.0.2\(28\) | All | All | All |
| Application | Cisco | Telepresence System Software | 6.1.0\(90\) | All | All | All |
| Application | Cisco | Telepresence System Software | All | All | All | All |
| Application | Cisco | Telepresence System Software | All | All | All | All |
| Hardware | Cisco | Telepresence System Tx1300 47 | All | All | All | All |
| Hardware | Cisco | Telepresence System Tx1310 65 | All | All | All | All |
| Hardware | Cisco | Telepresence System Tx9000 | All | All | All | All |
| Hardware | Cisco | Telepresence System Tx9200 | All | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Cisco TelePresence System Arbitrary Command Execution Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | Third Party Advisory, VDB Entry |
| Cisco TelePresence System Software Command Execution Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | tools.cisco.com | Vendor Advisory |
| Cisco TelePresence System Software Input Validation Flaw in SSCD Lets Remote Users Execute Arbitrary Code - SecurityTracker | af854a3a-2127-422b-91ae-364da2661108 | www.securitytracker.com | Third Party Advisory, VDB Entry |
| Security Advisory SA56533 - Cisco TelePresence Systems (CTS) SSCD Stack Corruption Vulnerability - Secunia | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| IBM X-Force Exchange | af854a3a-2127-422b-91ae-364da2661108 | exchange.xforce.ibmcloud.com | |
| osvdb.org/102362 | af854a3a-2127-422b-91ae-364da2661108 | osvdb.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.