VULNERABILITY INTELLIGENCE

CVE-2014-2170

CVSS score9 HIGH
EPSS probability2.17%
CISA KEVNot currently listed
Published2014-05-02
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:S/C:C/I:C/A:C

Description

Cisco TelePresence TC Software 4.x and 5.x before 5.1.7 and 6.x before 6.0.1 and TE Software 4.x and 6.0 allow remote authenticated users to execute arbitrary commands by using the commands as arguments to tshell (aka tcsh) scripts, aka Bug ID CSCue60202.

Weakness classification

  • CWE-94: Improper Control of Generation of Code ('Code Injection')

Primary references