Cisco TelePresence TC Software CVE-2013-3401 Security Bypass Vulnerability

Bugtraq ID:	60908
Class:	Design Error
CVE:	CVE-2013-3401
Remote:	Yes
Local:	No
Published:	Jun 29 2013 12:00AM
Updated:	Jun 29 2013 12:00AM
Credit:	Cisco
Vulnerable:	Cisco TelePresence TC Software 5.1.4
Not Vulnerable:

Cisco TelePresence TC Software CVE-2013-3401 Security Bypass Vulnerability

Cisco TelePresence TC Software is prone to a security-bypass vulnerability.

Exploiting this issue could allow an attacker to bypass certain security restrictions and perform unauthorized actions on the affected device.

This issue is being tracked by Cisco Bug ID CSCud96080.

Cisco TelePresence TC Software 5.1.4 is vulnerable; other versions may also be affected.

Cisco TelePresence TC Software CVE-2013-3401 Security Bypass Vulnerability

An attacker can exploit this issue using readily available tools.

Cisco TelePresence TC Software CVE-2013-3401 Security Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco TelePresence TC Software CVE-2013-3401 Security Bypass Vulnerability

References:

• Cisco Homepage (Cisco )
  
• Vulnerability Alert: Cisco TC Software SIP Implementation Vulnerability (Cisco)
  
• Cisco TC Software SIP Implementation Error May Affect Communications Integrity (Cisco)