CVE-2014-2172

Description

Buffer overflow in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows local users to gain privileges by leveraging improper handling of the u-boot compiler flag for internal executable files, aka Bug ID CSCub67693.

Risk Information

Base Score
8.4
MODERATE
Vector
AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.085

Associated Vulnerability

VulnerabilityOS Platform
Cisco TelePresence TC and TE Software u-boot Buffer Overflow Vulnerability For Cisco Telepresence Integrator C SeriesNCM
Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2014-2172)NCM

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-1706043Security Update for Cisco Telepresence Integrator C Series 9.1.1

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234