The web framework in Cisco TelePresence Advanced Media Gateway Series Software before 1.1(1.40), Cisco TelePresence IP Gateway Series Software, Cisco TelePresence IP VCR Series Software before 3.0(1.27), Cisco TelePresence ISDN Gateway Software before 2.2(1.94), Cisco TelePresence MCU Software before 4.4(3.54) and 4.5 before 4.5(1.45), Cisco TelePresence MSE Supervisor Software before 2.3(1.38), Cisco TelePresence Serial Gateway Series Software before 1.0(1.42), Cisco TelePresence Server Software for Hardware before 3.1(1.98), and Cisco TelePresence Server Software for Virtual Machine before 4.1(1.79) allows remote authenticated users to execute arbitrary commands with root privileges via unspecified vectors, aka Bug IDs CSCul55968, CSCur08993, CSCur15803, CSCur15807, CSCur15825, CSCur15832, CSCur15842, CSCur15850, and CSCur15855.

According to the self-reported version, the remote Cisco TelePresence Server contains a vulnerability in its web framework, which can allow an authenticated, remote attacker to inject arbitrary commands on the device with root permissions.

According to the self-reported version, the remote Cisco TelePresence MSE device contains a vulnerability in its web framework, which can allow an authenticated, remote attacker to inject arbitrary commands on the device with root permissions.

According to the self-reported version, the remote Cisco TelePresence MCU device contains a vulnerability in its web framework, which can allow an authenticated, remote attacker to inject arbitrary commands on the device with root permissions.

According to the self-reported version, the remote Cisco TelePresence IP VCR device contains a vulnerability in its web framework, which can allow an authenticated, remote attacker to inject arbitrary commands on the device with root permissions.

According to its self-reported version, the remote Cisco TelePresence ISDN Gateway device contains a vulnerability in its web framework, which can allow an authenticated, remote attacker to inject arbitrary commands on the device with root permissions.

ID	Name	Product	Family	Severity
83773	Cisco TelePresence Server Command Injection Vulnerability	Nessus	CISCO	high
83771	Cisco TelePresence MSE 8050 Command Injection Vulnerability	Nessus	CISCO	high
83770	Cisco TelePresence MCU Command Injection Vulnerability	Nessus	CISCO	high
83769	Cisco TelePresence IP VCR Command Injection Vulnerability	Nessus	CISCO	high
83767	Cisco TelePresence ISDN Gateway Command Injection Vulnerability	Nessus	CISCO	high

Detections

Analytics

CVE-2015-0713

high

Tenable Plugins

high

high

high

high

high