CVEvulnerability
CVE-2015-0697
5.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-04-15
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-601
Description
Open redirect vulnerability in the login page in Cisco TC Software before 6.3-26 and 7.x before 7.3.0 on Cisco TelePresence Collaboration Desk and Room Endpoints devices allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCuq94980.
Affected configurations
• cisco telepresence tc software 6.0.0
• cisco telepresence tc software 6.0.0-cucm
• cisco telepresence tc software 6.0.1
• cisco telepresence tc software 6.0.1-cucm
• cisco telepresence tc software 6.0.2
• cisco telepresence tc software 6.0 base
• cisco telepresence tc software 6.1.0
• cisco telepresence tc software 6.1.0-cucm
• cisco telepresence tc software 6.1.1
• cisco telepresence tc software 6.1.1-cucm
• cisco telepresence tc software 6.1.2
• cisco telepresence tc software 6.1.2-cucm
• cisco telepresence tc software 6.1 base
• cisco telepresence tc software 6.3 base
• cisco telepresence tc software 7.2 base
Related
Weakness · CWE (1)
- CWE-601 URL Redirection to Untrusted Site weakness
References
- http://tools.cisco.com/security/center/viewAlert.x?alertId=38350 Vendor Advisory
- http://www.securitytracker.com/id/1032136 Third Party Advisory, VDB Entry
- http://tools.cisco.com/security/center/viewAlert.x?alertId=38350 Vendor Advisory
- http://www.securitytracker.com/id/1032136 Third Party Advisory, VDB Entry