Cisco Telepresence Mxp Software vulnerabilities

2 vulnerabilities

Known vulnerabilities in Cisco Telepresence Mxp Software, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

3.5CVE-2011-2544ciscotelepresence_mxp_software
EPSS score
4.68%
Cross-site scripting (XSS) vulnerability in the web interface in Cisco TelePresence System MXP Series F9.1 and earlier allows remote authenticated users to inject arbitrary web script or HTML via a crafted Call ID, as demonstrated by resultant cross-site request forgery (CSRF) attacks that change passwords or cause a denial of service, aka Bug ID CSCtq46488.7.8CVE-2011-2577ciscotelepresence_c_series_software+2
EPSS score
12.72%
Unspecified vulnerability in Cisco TelePresence C Series Endpoints, E/EX Personal Video units, and MXP Series Codecs, when using software versions before TC 4.0.0 or F9.1, allows remote attackers to cause a denial of service (crash) via a crafted SIP packet to port 5060 or 5061, aka Bug ID CSCtq46500.