CVE-2014-2169
HighSummary
Cisco TelePresence TC Software versions 4.x through 6.x before 6.2.0 and TE Software versions 4.x and 6.0 allow remote authenticated users to execute arbitrary commands by using the commands as arguments to internal system scripts.
Risk Assessment
This vulnerability may lead to unauthorized access to the system and execution of malicious code, posing a serious security threat to the organization.
Recommendation
It is recommended to update the software to version 6.2.0 or later to mitigate this vulnerability.
Other vulnerabilities in Cisco TelePresence TC Software, TE Software
See all- CVE-2014-2171High
A heap-based buffer overflow in Cisco TelePresence TC Software versions 4.x through 6.x before 6.0.1 and TE Software versions 4.x and 6.0.x before 6.0.2 allows remote attackers to execute arbitrary code via crafted SIP packets.
- CVE-2014-2170High
Cisco TelePresence TC Software versions 4.x and 5.x before 5.1.7 and 6.x before 6.0.1, as well as TE Software versions 4.x and 6.0, allow remote authenticated users to execute arbitrary commands by using the commands as arguments to tshell scripts.
Original NVD description (English source)
Cisco TelePresence TC Software 4.x through 6.x before 6.2.0 and TE Software 4.x and 6.0 allow remote authenticated users to execute arbitrary commands by using the commands as arguments to internal system scripts, aka Bug ID CSCue60211.