CVE-2015-0713

Severity

90%

Complexity

80%

Confidentiality

165%

The web framework in Cisco TelePresence Advanced Media Gateway Series Software before 1.1(1.40), Cisco TelePresence IP Gateway Series Software, Cisco TelePresence IP VCR Series Software before 3.0(1.27), Cisco TelePresence ISDN Gateway Software before 2.2(1.94), Cisco TelePresence MCU Software before 4.4(3.54) and 4.5 before 4.5(1.45), Cisco TelePresence MSE Supervisor Software before 2.3(1.38), Cisco TelePresence Serial Gateway Series Software before 1.0(1.42), Cisco TelePresence Server Software for Hardware before 3.1(1.98), and Cisco TelePresence Server Software for Virtual Machine before 4.1(1.79) allows remote authenticated users to execute arbitrary commands with root privileges via unspecified vectors, aka Bug IDs CSCul55968, CSCur08993, CSCur15803, CSCur15807, CSCur15825, CSCur15832, CSCur15842, CSCur15850, and CSCur15855.

The web framework in Cisco TelePresence Advanced Media Gateway Series Software before 1.1(1.40), Cisco TelePresence IP Gateway Series Software, Cisco TelePresence IP VCR Series Software before 3.0(1.27), Cisco TelePresence ISDN Gateway Software before 2.2(1.94), Cisco TelePresence MCU Software before 4.4(3.54) and 4.5 before 4.5(1.45), Cisco TelePresence MSE Supervisor Software before 2.3(1.38), Cisco TelePresence Serial Gateway Series Software before 1.0(1.42), Cisco TelePresence Server Software for Hardware before 3.1(1.98), and Cisco TelePresence Server Software for Virtual Machine before 4.1(1.79) allows remote authenticated users to execute arbitrary commands with root privileges via unspecified vectors, aka Bug IDs CSCul55968, CSCur08993, CSCur15803, CSCur15807, CSCur15825, CSCur15832, CSCur15842, CSCur15850, and CSCur15855.

CVSS 2.0 Base Score 9. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (AV:N/AC:L/Au:S/C:C/I:C/A:C).

Overview

Type

Cisco

First reported 9 years ago

2015-05-25 00:59:00

Last updated 9 years ago

2015-05-26 17:47:00

Affected Software

Cisco Telepresence Advanced Media Gateway 1.0(.1.13)

1.0\(.1.13\)

Cisco Telepresence Advanced Media Gateway 1.1(.1.14)

1.1\(.1.14\)

Cisco Telepresence Advanced Media Gateway 1.1(1.34)

1.1\(1.34\)

Cisco Telepresence IP Gateway 2.0.1.7

2.0.1.7

Cisco Telepresence IP Gateway 2.0.1.11

2.0.1.11

Cisco Telepresence IP Gateway 2.0.3.34

2.0.3.34

Cisco Telepresence IP VCR 1.0 Converter 1.0(1.9)

1.0\(1.9\)

Cisco Telepresence IP VCR 2.4 1.2

1.2

Cisco Telepresence IP VCR 3.0 1.22

1.22

Cisco Telepresence IP VCR 3.0 1.24

1.24

Cisco Telepresence ISDN GW 3241 2.0(1.51)

2.0\(1.51\)

Cisco Telepresence ISDN GW 32412.1(1.22)

2.1\(1.22\)

Cisco Telepresence ISDN GW 3241 2.1(1.43)

2.1\(1.43\)

Cisco Telepresence ISDN GW 3241 2.1(1.49)

2.1\(1.49\)

Cisco Telepresence ISDN GW 3241 2.1(1.56)

2.1\(1.56\)

Cisco Telepresence MCU Software 4.1(1.51)

4.1\(1.51\)

Cisco Telepresence MCU Software 4.1(1.59)

4.1\(1.59\)

Cisco Telepresence MCU Software 4.2(1.43)

4.2\(1.43\)

Cisco Telepresence MCU Software 4.2(1.46)

4.2\(1.46\)

Cisco Telepresence MCU Software 4.2(1.50)

4.2\(1.50\)

Cisco Telepresence MCU Software 4.3(1.68)

4.3\(1.68\)

Cisco Telepresence MCU Software 4.3(2.30)

4.3\(2.30\)

Cisco Telepresence MCU Software 4.3(2.32)

4.3\(2.32\)

Cisco Telepresence MCU Software 4.4(3.42)

4.4\(3.42\)

Cisco Telepresence MCU Software 4.4(3.49)

4.4\(3.49\)

Cisco Telepresence Serial Gateway 1.0.1.23

1.0.1.23

Cisco Telepresence Serial Gateway 1.0.1.34

1.0.1.34

Cisco Telepresence Serial Gateway 1.0.1.38

1.0.1.38

Cisco TelePresence Server Software 2.1(1.33)

2.1\(1.33\)

Cisco TelePresence Server Software 2.1(1.37)

2.1\(1.37\)

Cisco TelePresence Server Software 2.2(1.43)

2.2\(1.43\)

Cisco TelePresence Server Software 2.2(1.48)

2.2\(1.48\)

Cisco TelePresence Server Software 2.2(1.54)

2.2\(1.54\)

Cisco TelePresence Server Software 2.3(1.55)

2.3\(1.55\)

Cisco TelePresence Server Software 2.3(1.57)

2.3\(1.57\)

Cisco TelePresence Server Software 3.0(2.24)

3.0\(2.24\)

Cisco TelePresence Server Software 4.0(1.57)

4.0\(1.57\)

Cisco TelePresence Server Software 4.0(2.8)

4.0\(2.8\)

Cisco Telepresence Supervisor MSE 8050 Software 2.1(1.18)

2.1\(1.18\)

Cisco Telepresence Supervisor MSE 8050 Software 2.2(1.17)

2.2\(1.17\)

Cisco Telepresence Supervisor MSE 8050 Software 2.3(1.32)

2.3\(1.32\)

References

20150513 Command Injection Vulnerability in Multiple Cisco TelePresence Products

Vendor Advisory

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.