What’s Vulnerable › Vulnerabilities

CVE-2014-0661

• Severity: high (CVSS 8.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-01-22 · updated 2026-06-17
• Weakness: CWE-94

Description

The System Status Collection Daemon (SSCD) in Cisco TelePresence System 500-37, 1000, 1300-65, and 3xxx before 1.10.2(42), and 500-32, 1300-47, TX1310 65, and TX9xxx before 6.0.4(11), allows remote attackers to execute arbitrary commands or cause a denial of service (stack memory corruption) via a crafted XML-RPC message, aka Bug ID CSCui32796.

Affected products

• Cisco Telepresence System 1000: all versions
• Cisco Telepresence System 1100: all versions
• Cisco Telepresence System 1300-65: all versions
• Cisco Telepresence System 3000: all versions
• Cisco Telepresence System 3010: all versions
• Cisco Telepresence System 3200: all versions
• Cisco Telepresence System 3210: all versions
• Cisco Telepresence System 500-32: all versions
• Cisco Telepresence System 500-37: all versions
• Cisco Telepresence System Software: through 1.10.1\(43\); through 6.0.3\(33\); 1.5.10(3648), 1.7.5(42), 1.7.6(4), 1.8.0(55), 1.8.1(34), 1.8.2(11) (+18)
• Cisco Telepresence System Tx1300 47: all versions
• Cisco Telepresence System Tx1310 65: all versions
• Cisco Telepresence System Tx9000: all versions
• Cisco Telepresence System Tx9200: all versions

References

• http://osvdb.org/102362
• http://secunia.com/advisories/56533
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140122-cts
• http://www.securityfocus.com/bid/65071
• http://www.securitytracker.com/id/1029656
• https://exchange.xforce.ibmcloud.com/vulnerabilities/90624
• http://osvdb.org/102362
• http://secunia.com/advisories/56533
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140122-cts
• http://www.securityfocus.com/bid/65071
• http://www.securitytracker.com/id/1029656
• https://exchange.xforce.ibmcloud.com/vulnerabilities/90624

Get alerted when CVE-2014-0661 or the next vulnerability affects your stack