CVE-2014-2168
HighSummary
Buffer overflow in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to execute arbitrary code via crafted DNS response packets.
Risk Assessment
Attackers can remotely take control of the system, posing a serious security threat to the organization.
Recommendation
It is recommended to update the software to the latest version to mitigate this vulnerability.
Other vulnerabilities in Cisco TelePresence TC Software 4.x, 5.x; TE Software 4.x, 6.0
See all- CVE-2014-2173High
Cisco TelePresence TC Software versions 4.x and 5.x and TE Software versions 4.x and 6.0 do not properly restrict access to the serial port, allowing local users to gain privileges via unspecified commands.
- CVE-2014-2164High
The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to cause a denial of service by sending crafted SIP packets.
- CVE-2014-2162High
The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets.
Original NVD description (English source)
Buffer overflow in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to execute arbitrary code via crafted DNS response packets, aka Bug ID CSCty44804.