CVE-2015-0770: Input Validation
CRLF injection vulnerability in Cisco TelePresence TC 6.x before 6.3.4 and 7.x before 7.3.3 on Integrator C SX20 devices allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL, aka Bug ID CSCut79341.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-0770?
CVE-2015-0770 is considered a medium severity vulnerability that allows HTTP response splitting attacks.
How do I fix CVE-2015-0770?
To fix CVE-2015-0770, upgrade your Cisco TelePresence TC software to version 6.3.4 or 7.3.3 or later.
What products are affected by CVE-2015-0770?
CVE-2015-0770 affects Cisco TelePresence TC software versions 6.x before 6.3.4 and 7.x before 7.3.3.
What type of attacks can be executed using CVE-2015-0770?
CVE-2015-0770 allows attackers to inject arbitrary HTTP headers, leading to potential HTTP response splitting attacks.
Is CVE-2015-0770 remote or local?
CVE-2015-0770 is a remote code execution vulnerability that can be exploited by attackers without physical access.