CVEvulnerability
CVE-2014-0661
8.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2014-01-22
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 8.3 HIGH — AV:A/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-94
Description
The System Status Collection Daemon (SSCD) in Cisco TelePresence System 500-37, 1000, 1300-65, and 3xxx before 1.10.2(42), and 500-32, 1300-47, TX1310 65, and TX9xxx before 6.0.4(11), allows remote attackers to execute arbitrary commands or cause a denial of service (stack memory corruption) via a crafted XML-RPC message, aka Bug ID CSCui32796.
Affected configurations
• cisco telepresence system software (<= 1.10.1\(43\))
• cisco telepresence system software 1.5.10\(3648\)
• cisco telepresence system software 1.7.5\(42\)
• cisco telepresence system software 1.7.6\(4\)
• cisco telepresence system software 1.8.0\(55\)
• cisco telepresence system software 1.8.1\(34\)
• cisco telepresence system software 1.8.2\(11\)
• cisco telepresence system software 1.8.3\(4\)
• cisco telepresence system software 1.8.4\(13\)
• cisco telepresence system software 1.8.5\(4\)
• cisco telepresence system software 1.9.0\(46\)
• cisco telepresence system software 1.9.1\(68\)
• cisco telepresence system software 1.9.2\(19\)
• cisco telepresence system software 1.9.3\(44\)
• cisco telepresence system software 1.9.4\(19\)
• cisco telepresence system software 1.9.5\(7\)
• cisco telepresence system software 1.9.6\(2\)
• cisco telepresence system software 1.9.6.1\(3\)
• cisco telepresence system software 1.10.0
• cisco telepresence system software 1.10.0\(259\)
• cisco telepresence system software 1.10.1
• cisco telepresence system 1000
• cisco telepresence system 1300-65
• cisco telepresence system 3000
• cisco telepresence system 3010
• cisco telepresence system 3200
• cisco telepresence system 3210
• cisco telepresence system 500-37
• cisco telepresence system software (<= 6.0.3\(33\))
• cisco telepresence system software 6.0.0.1\(4\)
• cisco telepresence system software 6.0.1\(50\)
• cisco telepresence system software 6.0.2\(28\)
• cisco telepresence system software 6.1.0\(90\)
• cisco telepresence system 1100
• cisco telepresence system 500-32
• cisco telepresence system tx1300 47
• cisco telepresence system tx1310 65
• cisco telepresence system tx9000
• cisco telepresence system tx9200
Related
Weakness · CWE (1)
- CWE-94 Improper Control of Generation of Code weakness
References
- http://osvdb.org/102362 osvdb.org
- http://secunia.com/advisories/56533 secunia.com
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140122-cts Vendor Advisory
- http://www.securityfocus.com/bid/65071 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1029656 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90624 exchange.xforce.ibmcloud.com
- http://osvdb.org/102362 osvdb.org
- http://secunia.com/advisories/56533 secunia.com
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140122-cts Vendor Advisory
- http://www.securityfocus.com/bid/65071 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1029656 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90624 exchange.xforce.ibmcloud.com