Login Request a demo
Unscored severity · published Jan 22, 2014
CVE-2014-0661
The System Status Collection Daemon (SSCD) in Cisco TelePresence System 500-37, 1000, 1300-65, and 3xxx before 1.10.2(42), and 500-32, 1300-47, TX1310 65, and TX9xxx before…
–
CVSS
2.3%
EPSS
No
On KEV
Description
The System Status Collection Daemon (SSCD) in Cisco TelePresence System 500-37, 1000, 1300-65, and 3xxx before 1.10.2(42), and 500-32, 1300-47, TX1310 65, and TX9xxx before 6.0.4(11), allows remote attackers to execute arbitrary commands or cause a denial of service (stack memory corruption) via a crafted XML-RPC message, aka Bug ID CSCui32796.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.3% · higher than 83% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TS
Telepresence System 1000 · Cisco
All versions, or not specified · source: NVD
TS
Telepresence System 1100 · Cisco
All versions, or not specified · source: NVD
TS
Telepresence System 1300-65 · Cisco
All versions, or not specified · source: NVD
TS
Telepresence System 3000 · Cisco
All versions, or not specified · source: NVD
TS
Telepresence System 3010 · Cisco
All versions, or not specified · source: NVD
TS
Telepresence System 3200 · Cisco
All versions, or not specified · source: NVD
TS
Telepresence System 3210 · Cisco
All versions, or not specified · source: NVD
TS
Telepresence System 500-32 · Cisco
All versions, or not specified · source: NVD
TS
Telepresence System 500-37 · Cisco
All versions, or not specified · source: NVD
TS
Telepresence System Software · Cisco
through 1.10.1\(43\); 1.5.10(3648); 1.7.5(42); 1.7.6(4); 1.8.0(55); 1.8.1(34); +20 more · source: NVD
TS
Telepresence System Tx1300 47 · Cisco
All versions, or not specified · source: NVD
TS
Telepresence System Tx1310 65 · Cisco
All versions, or not specified · source: NVD
Affected product
TS
Telepresence System 1000
Cisco
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-0661
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-0661
osvdb.org
http://osvdb.org/102362
secunia.com
http://secunia.com/advisories/56533
Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140122-cts
Third Party Advisory
http://www.securityfocus.com/bid/65071
Third Party Advisory
http://www.securitytracker.com/id/1029656
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/90624
More from Telepresence System 1000
–
CVE-2011-0373
The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote authenticated users to execute arbitrary commands via a malformed…
–
CVE-2011-0374
The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote authenticated users to execute arbitrary commands via a malformed…
–
CVE-2011-0375
The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.6.x allows remote authenticated users to execute arbitrary commands via a malformed…
–
CVE-2011-0372
The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote attackers to execute arbitrary commands via a malformed request,…
–
CVE-2011-0377
Cisco TelePresence endpoint devices with software 1.2.x through 1.6.x allow remote attackers to cause a denial of service (service crash) via a malformed SOAP request in…