← Back

CVE-2014-0661

nvd nist
Published: Jan 22, 2014Modified: Apr 29, 2026

JSON object

Loading...
8.3
Vector
AV:A/AC:L/Au:N/C:C/I:C/A:C
Exploitability: 6.5 / Impact: 10.0
Source: NVD

Description

The System Status Collection Daemon (SSCD) in Cisco TelePresence System 500-37, 1000, 1300-65, and 3xxx before 1.10.2(42), and 500-32, 1300-47, TX1310 65, and TX9xxx before 6.0.4(11), allows remote attackers to execute arbitrary commands or cause a denial of service (stack memory corruption) via a crafted XML-RPC message, aka Bug ID CSCui32796.

Affected (39)

Cisco
14 products
Telepresence System Software
Telepresence System 1000
Telepresence System 1300 65
Telepresence System 3000
Telepresence System 3010
Telepresence System 3200
Telepresence System 3210
Telepresence System 500 37
Telepresence System 1100
Telepresence System 500 32
Telepresence System Tx1300 47
Telepresence System Tx1310 65
Telepresence System Tx9000
Telepresence System Tx9200
Configuration A
28 vulnerable
Vulnerable SoftwareAffected Versions
Cisco
Telepresence System Software
Up to 1.10.1\(43\)
Telepresence System Software
Version 1.10.0
Telepresence System Software
Version 1.10.0(259)
Telepresence System Software
Version 1.10.1
Telepresence System Software
Version 1.5.10(3648)
Telepresence System Software
Version 1.7.5(42)
Telepresence System Software
Version 1.7.6(4)
Telepresence System Software
Version 1.8.0(55)
Telepresence System Software
Version 1.8.1(34)
Telepresence System Software
Version 1.8.2(11)
Telepresence System Software
Version 1.8.3(4)
Telepresence System Software
Version 1.8.4(13)
Telepresence System Software
Version 1.8.5(4)
Telepresence System Software
Version 1.9.0(46)
Telepresence System Software
Version 1.9.1(68)
Telepresence System Software
Version 1.9.2(19)
Telepresence System Software
Version 1.9.3(44)
Telepresence System Software
Version 1.9.4(19)
Telepresence System Software
Version 1.9.5(7)
Telepresence System Software
Version 1.9.6.1(3)
Telepresence System Software
Version 1.9.6(2)
Telepresence System 1000
All versions
Telepresence System 1300 65
All versions
Telepresence System 3000
All versions
Telepresence System 3010
All versions
Telepresence System 3200
All versions
Telepresence System 3210
All versions
Telepresence System 500 37
All versions
Configuration B
11 vulnerable
Vulnerable SoftwareAffected Versions
Cisco
Telepresence System Software
Up to 6.0.3\(33\)
Telepresence System Software
Version 6.0.0.1(4)
Telepresence System Software
Version 6.0.1(50)
Telepresence System Software
Version 6.0.2(28)
Telepresence System Software
Version 6.1.0(90)
Telepresence System 1100
All versions
Telepresence System 500 32
All versions
Telepresence System Tx1300 47
All versions
Telepresence System Tx1310 65
All versions
Telepresence System Tx9000
All versions
Telepresence System Tx9200
All versions

Related CWEs

CWE-94
Improper Control of Generation of Code ('Code Injection')
The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

References (12)

Source: psirt@cisco.com
Source: psirt@cisco.com
Source: psirt@cisco.com
Vendor Advisory
Source: psirt@cisco.com
Third Party AdvisoryVDB Entry
Source: psirt@cisco.com
Third Party AdvisoryVDB Entry
Source: psirt@cisco.com
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.