What is CVE-2015-0697?

CVE-2015-0697 is a vulnerability in Cisco Telepresence Tc Software, classified under URL Redirection to Untrusted Site (Open Redirect). Published 2015-04-15.

Is CVE-2015-0697 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Open Redirect in Cisco Telepresence Tc Software

CVE-2015-0697

Open redirect vulnerability in the login page in Cisco TC Software before 6.3-26 and 7.x before 7.3.0 on Cisco TelePresence Collaboration Desk and Room Endpoints devices allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCuq94980.

Vulnerability class: Open Redirect

EPSS: 0.019 (77.0th percentile) — read the EPSS interpretation.

Affected products

Cisco Telepresence_tc_software — versions 6.0.0, 6.0.0-cucm, 6.0.1
N/a — versions n/a

Weakness classification (CWE)

CWE-601 — URL Redirection to Untrusted Site (Open Redirect)

Public proof-of-concept exploits

ARPSyndicate/cvemon

References

psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2015-0697?: CVE-2015-0697 is a vulnerability in Cisco Telepresence Tc Software, classified under URL Redirection to Untrusted Site (Open Redirect). Published 2015-04-15.
Is CVE-2015-0697 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.