CVE-2014-2172

Severity: medium (CVSS 6.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-05-02 · updated 2026-06-17
Weakness: CWE-119

Description

Buffer overflow in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows local users to gain privileges by leveraging improper handling of the u-boot compiler flag for internal executable files, aka Bug ID CSCub67693.

Affected products

Cisco TelePresence CE and TC 8.1.x: 4.0.0, 4.0.1, 4.0.4, 4.1.1, 4.1.2, 4.2.0 (+15)
Cisco Telepresence Te Software: 4.1.0, 4.1.1, 4.1.2, 4.1.3, 6.0

References

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140430-tcte
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140430-tcte

Get alerted when CVE-2014-2172 or the next vulnerability affects your stack