CVE-2014-2170: Code Injection
Cisco TelePresence TC Software 4.x and 5.x before 5.1.7 and 6.x before 6.0.1 and TE Software 4.x and 6.0 allow remote authenticated users to execute arbitrary commands by using the commands as arguments to tshell (aka tcsh) scripts, aka Bug ID CSCue60202.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-2170?
The severity of CVE-2014-2170 is high, as it allows remote authenticated users to execute arbitrary commands.
How do I fix CVE-2014-2170?
To fix CVE-2014-2170, upgrade to Cisco TelePresence TC Software version 6.0.1 or later, or TC Software version 5.1.7 or later.
Which versions are affected by CVE-2014-2170?
CVE-2014-2170 affects Cisco TelePresence TC Software versions 4.x and 5.x before 5.1.7, and 6.x before 6.0.1, as well as TE Software 4.x and 6.0.
Can CVE-2014-2170 be exploited remotely?
Yes, CVE-2014-2170 can be exploited by remote authenticated users to execute arbitrary commands.
Who is impacted by CVE-2014-2170?
Any organization using the affected versions of Cisco TelePresence TC and TE software is at risk from CVE-2014-2170.