Cisco Telepresence System Software — known CVE vulnerabilities

Every CVE whose affected-product data names Cisco Telepresence System Software, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (25)

• CVE-2011-0376 — CVSS 10.0 (critical): The TFTP implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x, 1.6.0, and 1.6.1 allows remote attackers…
• CVE-2013-3454 — CVSS 10.0 (critical): Cisco TelePresence System Software 1.10.1 and earlier on 500, 13X0, 1X00, 30X0, and 3X00 devices, and 6.0.3 and earlier on TX 9X00 devices…
• CVE-2011-0372 — CVSS 10.0 (critical): The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote attackers to execute…
• CVE-2011-0373 — CVSS 9.0 (critical): The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote authenticated users to…
• CVE-2011-0375 — CVSS 9.0 (critical): The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.6.x allows remote authenticated users to…
• CVE-2011-0374 — CVSS 9.0 (critical): The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote authenticated users to…
• CVE-2012-3075 — CVSS 9.0 (critical): The administrative web interface on Cisco TelePresence Immersive Endpoint Devices before 1.7.4 allows remote authenticated users to execute…
• CVE-2012-3074 — CVSS 8.3 (high): An unspecified API on Cisco TelePresence Immersive Endpoint Devices before 1.9.1 allows remote attackers to execute arbitrary commands by…
• CVE-2011-0378 — CVSS 8.3 (high): The XML-RPC implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote attackers to execute…
• CVE-2012-2486 — CVSS 8.3 (high): The Cisco Discovery Protocol (CDP) implementation on Cisco TelePresence Multipoint Switch before 1.9.0, Cisco TelePresence Immersive…
• CVE-2014-0661 — CVSS 8.3 (high): The System Status Collection Daemon (SSCD) in Cisco TelePresence System 500-37, 1000, 1300-65, and 3xxx before 1.10.2(42), and 500-32…
• CVE-2011-0379 — CVSS 7.9 (high): Buffer overflow on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 1.6.x; Cisco TelePresence Multipoint Switch…
• CVE-2014-2161 — CVSS 7.8 (high): The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service…
• CVE-2014-2159 — CVSS 7.8 (high): The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service…
• CVE-2014-2160 — CVSS 7.8 (high): The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service…
• CVE-2011-0377 — CVSS 7.8 (high): Cisco TelePresence endpoint devices with software 1.2.x through 1.6.x allow remote attackers to cause a denial of service (service crash)…
• CVE-2014-3362 — CVSS 7.8 (high): Memory leak in Cisco TelePresence System Edge MXP Series Software F9.3.3 and earlier allows remote attackers to cause a denial of service…
• CVE-2012-0330 — CVSS 7.8 (high): Cisco TelePresence Video Communication Server with software before X7.0.1 allows remote attackers to cause a denial of service (device…
• CVE-2012-3073 — CVSS 7.8 (high): The IP implementation on Cisco TelePresence Multipoint Switch before 1.8.1, Cisco TelePresence Manager before 1.9.0, and Cisco TelePresence…
• CVE-2014-2158 — CVSS 7.8 (high): Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via…
• CVE-2012-0331 — CVSS 7.5 (high): Cisco TelePresence Video Communication Server with software before X7.0.1 allows remote attackers to cause a denial of service (device…
• CVE-2014-2157 — CVSS 7.1 (high): Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via…
• CVE-2014-2156 — CVSS 7.1 (high): Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via…
• CVE-2013-1246 — CVSS 6.8 (medium): Cisco TelePresence System Software does not properly handle inactive t-shell sessions, which allows remote authenticated users to cause a…
• CVE-2014-3274 — CVSS 4.3 (medium): Cisco TelePresence System (CTS) 6.0(.5)(5) and earlier falls back to HTTP when certain HTTPS sessions cannot be established, which allows…