CVE-2014-2173

CWE-264CWE-119 — Buffer OverflowCWE-20 — Improper Input ValidationCWE-399CWE-78 — OS Command Injection4 documents4 sources
Severity
7.2HIGH
EPSS
0.1%
top 75.49%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Cisco Telepresence TC SoftwareCisco Telepresence TE Software
Timeline
PublishedMay 2
Latest updateMay 17

Description

Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 do not properly restrict access to the serial port, which allows local users to gain privileges via unspecified commands, aka Bug ID CSCub67692.

CVSS vector

AV:L/AC:L/C:C/I:C/A:CExploitability: 3.9 | Impact: 10.0

Affected Packages2 packages

▶NVDcisco/telepresence_tc_software21 versions+20

🔴Vulnerability Details

2
GHSA
GHSA-93q3-5jr8-j842: Cisco TelePresence TC Software 4↗2022-05-17
▶
CVEList
CVE-2014-2173: Cisco TelePresence TC Software 4↗2014-05-02
▶

📋Vendor Advisories

1
Cisco
Multiple Vulnerabilities in Cisco TelePresence TC and TE Software↗2014-04-30
▶