CVE-2014-2173
HighSummary
Cisco TelePresence TC Software versions 4.x and 5.x and TE Software versions 4.x and 6.0 do not properly restrict access to the serial port, allowing local users to gain privileges via unspecified commands.
Risk Assessment
Improper restriction of access to the serial port may lead to privilege escalation by local users, posing a serious security threat to the system.
Recommendation
It is recommended to update the software to the latest version to mitigate this vulnerability and implement additional security measures to restrict access to the serial port.
Other vulnerabilities in Cisco TelePresence TC Software 4.x, 5.x; TE Software 4.x, 6.0
See all- CVE-2014-2168High
Buffer overflow in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to execute arbitrary code via crafted DNS response packets.
- CVE-2014-2164High
The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to cause a denial of service by sending crafted SIP packets.
- CVE-2014-2162High
The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets.
Original NVD description (English source)
Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 do not properly restrict access to the serial port, which allows local users to gain privileges via unspecified commands, aka Bug ID CSCub67692.