Vulnerability in Cisco Telepresence Tc Software

CVE-2014-2173

Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 do not properly restrict access to the serial port, which allows local users to gain privileges via unspecified commands, aka Bug ID CSCub67692.

EPSS: 0.004 (31.4th percentile) — read the EPSS interpretation.

Affected products

Cisco Telepresence_tc_software — versions 4.0.0, 4.0.1, 4.0.4
Cisco Telepresence_te_software — versions 4.1.0, 4.1.1, 4.1.2
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)