VULNERABILITY INTELLIGENCE

CVE-2015-0770

CVSS score5 MEDIUM

EPSS probability1.74%

CISA KEVNot currently listed

Published2015-06-07

Last modified2026-06-17

CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:N

Description

CRLF injection vulnerability in Cisco TelePresence TC 6.x before 6.3.4 and 7.x before 7.3.3 on Integrator C SX20 devices allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL, aka Bug ID CSCut79341.

Weakness classification

CWE-20: Improper Input Validation
CWE-93: Improper Neutralization of CRLF Sequences ('CRLF Injection')

Primary references

psirt@cisco.com — Vendor Advisory
psirt@cisco.com — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry