CVE-2013-3379: cisco telepresence_tc_software

Vulnerability summary

CVE-2013-3379 is a high (CVSS 8.3) vulnerability in cisco telepresence_tc_software. EPSS estimates a 1.00% chance of exploitation in the next 30 days, higher than 62.4% of scored vulnerabilities.

Timeline

1. 21-06-2013
   PublishedVulnerability first disclosed.
2. 16-09-2024
   Last modifiedVulnerability information updated.

Description

The firewall subsystem in Cisco TelePresence TC Software before 4.2 does not properly implement rules that grant access to hosts, which allows remote attackers to obtain shell access with root privileges by leveraging connectivity to the management network, aka Bug ID CSCts37781.

• CWE-264Permissions, Privileges, and Access ControlsWeaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.