CVE-2014-2172

CVE-2014-2172 is a medium-severity vulnerability in Cisco Telepresence Tc Software with a CVSS 2.0 base score of 6.6. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-119.

Key facts

• Severity: Medium (CVSS 2.0 base score 6.6)
• EPSS exploit prediction: 0% (25th percentile)
• Actively exploited: Not listed in CISA KEV
• Weakness: CWE-119
• Affected product: Cisco Telepresence Tc Software
• Published: 2014-05-02
• Last modified: 2026-06-17

Description

Buffer overflow in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows local users to gain privileges by leveraging improper handling of the u-boot compiler flag for internal executable files, aka Bug ID CSCub67693.

Frequently asked questions

What is CVE-2014-2172?

Buffer overflow in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows local users to gain privileges by leveraging improper handling of the u-boot compiler flag for internal executable files, aka Bug ID CSCub67693.

How severe is CVE-2014-2172?

CVE-2014-2172 has a CVSS 2.0 base score of 6.6, rated medium severity.

Is CVE-2014-2172 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (25th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2014-2172?

CVE-2014-2172 primarily affects Cisco Telepresence Tc Software. In total, 26 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2014-2172?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2014-2172 published?

CVE-2014-2172 was published on 2014-05-02 and last updated on 2026-06-17.

References

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140430-tcte

Affected products (26)

• cpe:2.3:a:cisco:telepresence_tc_software:4.0.0:*:*:*:*:*:*:*
• cpe:2.3:a:cisco:telepresence_tc_software:4.0.1:*:*:*:*:*:*:*
• cpe:2.3:a:cisco:telepresence_tc_software:4.0.4:*:*:*:*:*:*:*
• cpe:2.3:a:cisco:telepresence_tc_software:4.1.1:*:*:*:*:*:*:*
• cpe:2.3:a:cisco:telepresence_tc_software:4.1.2:*:*:*:*:*:*:*
• cpe:2.3:a:cisco:telepresence_tc_software:4.2.0:*:*:*:*:*:*:*
• cpe:2.3:a:cisco:telepresence_tc_software:4.2.1:*:*:*:*:*:*:*
• cpe:2.3:a:cisco:telepresence_tc_software:4.2.2:*:*:*:*:*:*:*
• cpe:2.3:a:cisco:telepresence_tc_software:4.2.3:*:*:*:*:*:*:*
• cpe:2.3:a:cisco:telepresence_tc_software:4.2.4:*:*:*:*:*:*:*
• cpe:2.3:a:cisco:telepresence_tc_software:5.0.0:*:*:*:*:*:*:*
• cpe:2.3:a:cisco:telepresence_tc_software:5.0.1:*:*:*:*:*:*:*
• cpe:2.3:a:cisco:telepresence_tc_software:5.0.2:*:*:*:*:*:*:*
• cpe:2.3:a:cisco:telepresence_tc_software:5.1.0:*:*:*:*:*:*:*
• cpe:2.3:a:cisco:telepresence_tc_software:5.1.1:*:*:*:*:*:*:*
• cpe:2.3:a:cisco:telepresence_tc_software:5.1.2:*:*:*:*:*:*:*
• cpe:2.3:a:cisco:telepresence_tc_software:5.1.3:*:*:*:*:*:*:*
• cpe:2.3:a:cisco:telepresence_tc_software:5.1.4:*:*:*:*:*:*:*
• cpe:2.3:a:cisco:telepresence_tc_software:5.1.5:*:*:*:*:*:*:*
• cpe:2.3:a:cisco:telepresence_tc_software:5.1.6:*:*:*:*:*:*:*
• cpe:2.3:a:cisco:telepresence_tc_software:5.1.7:*:*:*:*:*:*:*
• cpe:2.3:a:cisco:telepresence_te_software:4.1.0:*:*:*:*:*:*:*
• cpe:2.3:a:cisco:telepresence_te_software:4.1.1:*:*:*:*:*:*:*
• cpe:2.3:a:cisco:telepresence_te_software:4.1.2:*:*:*:*:*:*:*
• cpe:2.3:a:cisco:telepresence_te_software:4.1.3:*:*:*:*:*:*:*
• cpe:2.3:a:cisco:telepresence_te_software:6.0:*:*:*:*:*:*:*

More vulnerabilities in Cisco Telepresence Tc Software

• CVE-2014-2171 — Critical (CVSS 10.0): Heap-based buffer overflow in Cisco TelePresence TC Software 4.x through 6.x before 6.0.1 and TE Software 4.x and 6.0.x…
• CVE-2016-1387 — Critical (CVSS 9.8): The XML API in TelePresence Codec (TC) 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.3.2, 7.3.3, 7.3.4, and 7.3.5 and Collaboration…
• CVE-2014-2170 — Critical (CVSS 9.0): Cisco TelePresence TC Software 4.x and 5.x before 5.1.7 and 6.x before 6.0.1 and TE Software 4.x and 6.0 allow remote…
• CVE-2014-2169 — Critical (CVSS 9.0): Cisco TelePresence TC Software 4.x through 6.x before 6.2.0 and TE Software 4.x and 6.0 allow remote authenticated…
• CVE-2014-2174 — High (CVSS 8.3): Cisco TelePresence T, TelePresence TE, and TelePresence TC before 7.1 do not properly implement access control, which…
• CVE-2013-3379 — High (CVSS 8.3): The firewall subsystem in Cisco TelePresence TC Software before 4.2 does not properly implement rules that grant access…

All CVEs affecting Cisco Telepresence Tc Software →

Other CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer) vulnerabilities

• CVE-2026-105285 — Critical (CVSS 10.0): A security vulnerability has been detected in Totolink A3002MU 1.0.0-B20230403.1455. This affects an unknown function…
• CVE-2026-104610 — Critical (CVSS 10.0): A security vulnerability has been detected in Tenda HG7, HG9 and HG10 300001138_en_xpon. This impacts the function…
• CVE-2026-101039 — Critical (CVSS 10.0): A vulnerability was identified in FAST FAC1900R 20190827_2.0.2. Affected by this issue is the function copy_msg_element…
• CVE-2026-96257 — Critical (CVSS 10.0): A flaw has been found in Fast FAC1203R Gigabit Edition 2.0.4. Affected by this issue is the function copy_msg_element…
• CVE-2026-94089 — Critical (CVSS 10.0): A vulnerability was determined in D-Link DIR-868L 2.01b05. This issue affects the function strcpy of the file…
• CVE-2026-94003 — Critical (CVSS 10.0): A vulnerability has been found in Comfast CF-N1-S 2.6.0.1. Impacted is the function get_css_path_from_uri of the file…

Browse all CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer) vulnerabilities →