Cisco TelePresence TC and TE Software Multiple Security Vulnerabilities
BID:67170
Info
Cisco TelePresence TC and TE Software Multiple Security Vulnerabilities
| Bugtraq ID: | 67170 |
| Class: | Unknown |
| CVE: |
CVE-2014-2162 CVE-2014-2163 CVE-2014-2164 CVE-2014-2165 CVE-2014-2166 CVE-2014-2167 CVE-2014-2168 CVE-2014-2169 CVE-2014-2170 CVE-2014-2171 CVE-2014-2172 CVE-2014-2173 CVE-2014-2175 |
| Remote: | Yes |
| Local: | Yes |
| Published: | Apr 30 2014 12:00AM |
| Updated: | May 09 2014 12:42AM |
| Credit: | Cisco |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Cisco TelePresence TC and TE Software Multiple Security Vulnerabilities
Cisco TelePresence TC and TE Software are prone to the following security vulnerabilities:
1. Multiple remote denial-of-service vulnerabilities
2. A buffer-overflow vulnerability
3. A command-injection vulnerability
4. A command-injection vulnerability
5. A heap-based buffer-overflow vulnerability
6. A local buffer-overflow vulnerability
7. A local authentication-bypass vulnerability
8. A remote denial-of-service vulnerability
Attackers can exploit these issues to execute arbitrary code in the context of the device, bypass authentication mechanisms, gain unauthorized access, execute arbitrary commands, or cause denial-of-service conditions; other attacks may also be possible.
These issues are being tracked by Cisco Bug IDs CSCud29566, CSCua64961, CSCuj94651, CSCtq72699, CSCto70562, CSCua86589, CSCty44804, CSCue60211, CSCue60202, CSCud81796, CSCub67693, CSCub67692, and CSCtq78849.
Cisco TelePresence TC and TE Software are prone to the following security vulnerabilities:
1. Multiple remote denial-of-service vulnerabilities
2. A buffer-overflow vulnerability
3. A command-injection vulnerability
4. A command-injection vulnerability
5. A heap-based buffer-overflow vulnerability
6. A local buffer-overflow vulnerability
7. A local authentication-bypass vulnerability
8. A remote denial-of-service vulnerability
Attackers can exploit these issues to execute arbitrary code in the context of the device, bypass authentication mechanisms, gain unauthorized access, execute arbitrary commands, or cause denial-of-service conditions; other attacks may also be possible.
These issues are being tracked by Cisco Bug IDs CSCud29566, CSCua64961, CSCuj94651, CSCtq72699, CSCto70562, CSCua86589, CSCty44804, CSCue60211, CSCue60202, CSCud81796, CSCub67693, CSCub67692, and CSCtq78849.
Exploit / POC
Cisco TelePresence TC and TE Software Multiple Security Vulnerabilities
Currently, we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Cisco TelePresence TC and TE Software Multiple Security Vulnerabilities
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Cisco TelePresence TC and TE Software Multiple Security Vulnerabilities
References:
References:
- Cisco Homepage (Cisco )