CVE-2014-2170
HighSummary
Cisco TelePresence TC Software versions 4.x and 5.x before 5.1.7 and 6.x before 6.0.1, as well as TE Software versions 4.x and 6.0, allow remote authenticated users to execute arbitrary commands by using the commands as arguments to tshell scripts.
Risk Assessment
This vulnerability may lead to unauthorized command execution on the system, posing a serious security threat to the organization.
Recommendation
It is recommended to update the software to the latest version to mitigate this vulnerability and to restrict system access to trusted users.
Other vulnerabilities in Cisco TelePresence TC Software, TE Software
See all- CVE-2014-2171High
A heap-based buffer overflow in Cisco TelePresence TC Software versions 4.x through 6.x before 6.0.1 and TE Software versions 4.x and 6.0.x before 6.0.2 allows remote attackers to execute arbitrary code via crafted SIP packets.
- CVE-2014-2169High
Cisco TelePresence TC Software versions 4.x through 6.x before 6.2.0 and TE Software versions 4.x and 6.0 allow remote authenticated users to execute arbitrary commands by using the commands as arguments to internal system scripts.
Original NVD description (English source)
Cisco TelePresence TC Software 4.x and 5.x before 5.1.7 and 6.x before 6.0.1 and TE Software 4.x and 6.0 allow remote authenticated users to execute arbitrary commands by using the commands as arguments to tshell (aka tcsh) scripts, aka Bug ID CSCue60202.