RCE in Cisco Telepresence Tc Software
CVE-2014-2170
Cisco TelePresence TC Software 4.x and 5.x before 5.1.7 and 6.x before 6.0.1 and TE Software 4.x and 6.0 allow remote authenticated users to execute arbitrary commands by using the commands as arguments to tshell (aka tcsh) scripts, aka Bug ID CSCue60202.
Vulnerability class: RCE (Remote Code Execution)
EPSS: 0.022 (80.4th percentile) — read the EPSS interpretation.
Affected products
- Cisco Telepresence_tc_software — versions 4.0.0, 4.0.1, 4.0.4
- Cisco Telepresence_te_software — versions 4.1.0, 4.1.1, 4.1.2
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)