Lucene search
CiscoCVE-2015-0770HistoryJun 07, 2015 - 6:59 p.m.
CVE-2015-0770
2015-06-0718:59:05
CWE-20
CWE-93
cisco
web.nvd.nist.gov
32
cve-2015-0770
crlf injection
cisco telepresence
tc 6.x
tc 7.x
http header injection
http response splitting
bug id cscut79341
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
AI Score
7.2
Confidence
Low
EPSS
0.001
Percentile
44.5%
CRLF injection vulnerability in Cisco TelePresence TC 6.x before 6.3.4 and 7.x before 7.3.3 on Integrator C SX20 devices allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL, aka Bug ID CSCut79341.
Affected configurations
Node
ciscotelepresence_tc_softwareMatch6.3.0
ORciscotelepresence_tc_softwareMatch6.3.1
ORciscotelepresence_tc_softwareMatch6.3.2
ORciscotelepresence_tc_softwareMatch6.3.3
ORciscotelepresence_tc_softwareMatch7.1.0
ORciscotelepresence_tc_softwareMatch7.1.1
ORciscotelepresence_tc_softwareMatch7.1.2
ORciscotelepresence_tc_softwareMatch7.1.3
ORciscotelepresence_tc_softwareMatch7.1.4
ORciscotelepresence_tc_softwareMatch7.2.0
ORciscotelepresence_tc_softwareMatch7.2.1
ORciscotelepresence_tc_softwareMatch7.3.0
ORciscotelepresence_tc_softwareMatch7.3.1
ORciscotelepresence_tc_softwareMatch7.3.2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | telepresence_tc_software | 6.3.0 | cpe:2.3:a:cisco:telepresence_tc_software:6.3.0:*:*:*:*:*:*:* |
| cisco | telepresence_tc_software | 6.3.1 | cpe:2.3:a:cisco:telepresence_tc_software:6.3.1:*:*:*:*:*:*:* |
| cisco | telepresence_tc_software | 6.3.2 | cpe:2.3:a:cisco:telepresence_tc_software:6.3.2:*:*:*:*:*:*:* |
| cisco | telepresence_tc_software | 6.3.3 | cpe:2.3:a:cisco:telepresence_tc_software:6.3.3:*:*:*:*:*:*:* |
| cisco | telepresence_tc_software | 7.1.0 | cpe:2.3:a:cisco:telepresence_tc_software:7.1.0:*:*:*:*:*:*:* |
| cisco | telepresence_tc_software | 7.1.1 | cpe:2.3:a:cisco:telepresence_tc_software:7.1.1:*:*:*:*:*:*:* |
| cisco | telepresence_tc_software | 7.1.2 | cpe:2.3:a:cisco:telepresence_tc_software:7.1.2:*:*:*:*:*:*:* |
| cisco | telepresence_tc_software | 7.1.3 | cpe:2.3:a:cisco:telepresence_tc_software:7.1.3:*:*:*:*:*:*:* |
| cisco | telepresence_tc_software | 7.1.4 | cpe:2.3:a:cisco:telepresence_tc_software:7.1.4:*:*:*:*:*:*:* |
| cisco | telepresence_tc_software | 7.2.0 | cpe:2.3:a:cisco:telepresence_tc_software:7.2.0:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2015-0770
2015-06-07 18:00:00
cisco
cisco
Cisco TelePresence HTTP Response Splitting Vulnerability
2015-06-05 00:58:08
prion
prion
Crlf injection
2015-06-07 18:59:00
nvd
nvd
CVE-2015-0770
2015-06-07 18:59:05
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
AI Score
7.2
Confidence
Low
EPSS
0.001
Percentile
44.5%
Related for CVE-2015-0770