CVE-2015-0770

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-06-07 · updated 2026-06-17
Weakness: CWE-20

Description

CRLF injection vulnerability in Cisco TelePresence TC 6.x before 6.3.4 and 7.x before 7.3.3 on Integrator C SX20 devices allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL, aka Bug ID CSCut79341.

Affected products

Cisco TelePresence CE and TC 8.1.x: 6.3.0, 6.3.1, 6.3.2, 6.3.3, 7.1.0, 7.1.1 (+8)

References

http://tools.cisco.com/security/center/viewAlert.x?alertId=39210
http://www.securitytracker.com/id/1032511
http://tools.cisco.com/security/center/viewAlert.x?alertId=39210
http://www.securitytracker.com/id/1032511

Get alerted when CVE-2015-0770 or the next vulnerability affects your stack