CVE-2014-2171
HighSummary
A heap-based buffer overflow in Cisco TelePresence TC Software versions 4.x through 6.x before 6.0.1 and TE Software versions 4.x and 6.0.x before 6.0.2 allows remote attackers to execute arbitrary code via crafted SIP packets.
Risk Assessment
Attackers can exploit this vulnerability to remotely execute code, potentially leading to system compromise and data leakage.
Recommendation
It is recommended to update the software to the latest versions that address this vulnerability.
Other vulnerabilities in Cisco TelePresence TC Software, TE Software
See all- CVE-2014-2170High
Cisco TelePresence TC Software versions 4.x and 5.x before 5.1.7 and 6.x before 6.0.1, as well as TE Software versions 4.x and 6.0, allow remote authenticated users to execute arbitrary commands by using the commands as arguments to tshell scripts.
- CVE-2014-2169High
Cisco TelePresence TC Software versions 4.x through 6.x before 6.2.0 and TE Software versions 4.x and 6.0 allow remote authenticated users to execute arbitrary commands by using the commands as arguments to internal system scripts.
Original NVD description (English source)
Heap-based buffer overflow in Cisco TelePresence TC Software 4.x through 6.x before 6.0.1 and TE Software 4.x and 6.0.x before 6.0.2 allows remote attackers to execute arbitrary code via crafted SIP packets, aka Bug ID CSCud81796.