PT-2014-4529 · Cisco · Cisco Telepresence Te+1

Publicado 2014-05-02 · Atualizado 2014-05-02 · CVE-2014-2171

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco TelePresence TC Software versions 4.x through 6.x before 6.0.1 Cisco TelePresence TE Software versions 4.x and 6.0.x before 6.0.2

Description A heap-based buffer overflow issue allows remote attackers to execute arbitrary code via crafted SIP packets.

Recommendations For Cisco TelePresence TC Software versions 4.x through 6.x before 6.0.1, update to version 6.0.1 or later. For Cisco TelePresence TE Software versions 4.x and 6.0.x before 6.0.2, update to version 6.0.2 or later.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2014-2171

Produtos afetados

Cisco Telepresence Tc

Cisco Telepresence Te

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2014-2171 · Nota de Segurança
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140430-tcte · Aviso do Fabricante