CVE-2014-2170: Code Injection
First published: Fri May 02 2014(Updated: )
Cisco TelePresence TC Software 4.x and 5.x before 5.1.7 and 6.x before 6.0.1 and TE Software 4.x and 6.0 allow remote authenticated users to execute arbitrary commands by using the commands as arguments to tshell (aka tcsh) scripts, aka Bug ID CSCue60202.
Credit: ykramarz@cisco.com psirt@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco TelePresence TE Software | =4.1.0 | |
| Cisco TelePresence TE Software | =4.1.1 | |
| Cisco TelePresence TE Software | =4.1.2 | |
| Cisco TelePresence TE Software | =4.1.3 | |
| Cisco TelePresence TE Software | =6.0 | |
| Cisco TelePresence TC | =4.0.0 | |
| Cisco TelePresence TC | =4.0.1 | |
| Cisco TelePresence TC | =4.0.4 | |
| Cisco TelePresence TC | =4.1.1 | |
| Cisco TelePresence TC | =4.1.2 | |
| Cisco TelePresence TC | =4.2.0 | |
| Cisco TelePresence TC | =4.2.1 | |
| Cisco TelePresence TC | =4.2.2 | |
| Cisco TelePresence TC | =4.2.3 | |
| Cisco TelePresence TC | =4.2.4 | |
| Cisco TelePresence TC | =5.0.0 | |
| Cisco TelePresence TC | =5.0.1 | |
| Cisco TelePresence TC | =5.0.2 | |
| Cisco TelePresence TC | =5.1.0 | |
| Cisco TelePresence TC | =5.1.1 | |
| Cisco TelePresence TC | =5.1.2 | |
| Cisco TelePresence TC | =5.1.3 | |
| Cisco TelePresence TC | =5.1.4 | |
| Cisco TelePresence TC | =5.1.5 | |
| Cisco TelePresence TC | =5.1.6 | |
| Cisco TelePresence TC | =6.0.0 | |
| =4.1.0 | ||
| =4.1.1 | ||
| =4.1.2 | ||
| =4.1.3 | ||
| =6.0 | ||
| =4.0.0 | ||
| =4.0.1 | ||
| =4.0.4 | ||
| =4.1.1 | ||
| =4.1.2 | ||
| =4.2.0 | ||
| =4.2.1 | ||
| =4.2.2 | ||
| =4.2.3 | ||
| =4.2.4 | ||
| =5.0.0 | ||
| =5.0.1 | ||
| =5.0.2 | ||
| =5.1.0 | ||
| =5.1.1 | ||
| =5.1.2 | ||
| =5.1.3 | ||
| =5.1.4 | ||
| =5.1.5 | ||
| =5.1.6 | ||
| =6.0.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2014-2170?
The severity of CVE-2014-2170 is high, as it allows remote authenticated users to execute arbitrary commands.
How do I fix CVE-2014-2170?
To fix CVE-2014-2170, upgrade to Cisco TelePresence TC Software version 6.0.1 or later, or TC Software version 5.1.7 or later.
Which versions are affected by CVE-2014-2170?
CVE-2014-2170 affects Cisco TelePresence TC Software versions 4.x and 5.x before 5.1.7, and 6.x before 6.0.1, as well as TE Software 4.x and 6.0.
Can CVE-2014-2170 be exploited remotely?
Yes, CVE-2014-2170 can be exploited by remote authenticated users to execute arbitrary commands.
Who is impacted by CVE-2014-2170?
Any organization using the affected versions of Cisco TelePresence TC and TE software is at risk from CVE-2014-2170.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/weakness
- agent/severity
- agent/description
- agent/first-publish-date
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/author
- agent/last-modified-date
- agent/source
- agent/tags
- agent/softwarecombine
- agent/event
- vendor/cisco
- canonical/cisco telepresence te software
- version/cisco telepresence te software/4.1.0
- version/cisco telepresence te software/4.1.1
- version/cisco telepresence te software/4.1.2
- version/cisco telepresence te software/4.1.3
- version/cisco telepresence te software/6.0
- canonical/cisco telepresence tc
- version/cisco telepresence tc/4.0.0
- version/cisco telepresence tc/4.0.1
- version/cisco telepresence tc/4.0.4
- version/cisco telepresence tc/4.1.1
- version/cisco telepresence tc/4.1.2
- version/cisco telepresence tc/4.2.0
- version/cisco telepresence tc/4.2.1
- version/cisco telepresence tc/4.2.2
- version/cisco telepresence tc/4.2.3
- version/cisco telepresence tc/4.2.4
- version/cisco telepresence tc/5.0.0
- version/cisco telepresence tc/5.0.1
- version/cisco telepresence tc/5.0.2
- version/cisco telepresence tc/5.1.0
- version/cisco telepresence tc/5.1.1
- version/cisco telepresence tc/5.1.2
- version/cisco telepresence tc/5.1.3
- version/cisco telepresence tc/5.1.4
- version/cisco telepresence tc/5.1.5
- version/cisco telepresence tc/5.1.6
- version/cisco telepresence tc/6.0.0