CVEvulnerability

CVE-2015-0770

5.0 MEDIUM Published 2015-06-07 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2015-06-07
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
Weaknesses
CWE-20, CWE-93

Description

CRLF injection vulnerability in Cisco TelePresence TC 6.x before 6.3.4 and 7.x before 7.3.3 on Integrator C SX20 devices allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL, aka Bug ID CSCut79341.

Affected configurations

• cisco telepresence tc software 6.3.0 • cisco telepresence tc software 6.3.1 • cisco telepresence tc software 6.3.2 • cisco telepresence tc software 6.3.3 • cisco telepresence tc software 7.1.0 • cisco telepresence tc software 7.1.1 • cisco telepresence tc software 7.1.2 • cisco telepresence tc software 7.1.3 • cisco telepresence tc software 7.1.4 • cisco telepresence tc software 7.2.0 • cisco telepresence tc software 7.2.1 • cisco telepresence tc software 7.3.0 • cisco telepresence tc software 7.3.1 • cisco telepresence tc software 7.3.2

Related

Weakness · CWE (2)

  • CWE-20 Improper Input Validation weakness
  • CWE-93 Improper Neutralization of CRLF Sequences weakness

References