CVE-2014-0661

HighCVSS 8.3/10Last modified Jun 17, 2026

Description

The System Status Collection Daemon (SSCD) in Cisco TelePresence System 500-37, 1000, 1300-65, and 3xxx before 1.10.2(42), and 500-32, 1300-47, TX1310 65, and TX9xxx before 6.0.4(11), allows remote attackers to execute arbitrary commands or cause a denial of service (stack memory corruption) via a crafted XML-RPC message, aka Bug ID CSCui32796.

Metrics

CVSS 2.0 8.3/10AV:A/AC:L/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-94

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://osvdb.org/102362
http://secunia.com/advisories/56533
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140122-ctsVendor Advisory
http://www.securityfocus.com/bid/65071Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1029656Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/90624
http://osvdb.org/102362
http://secunia.com/advisories/56533
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140122-ctsVendor Advisory
http://www.securityfocus.com/bid/65071Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1029656Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/90624

Timeline

Published: Jan 22, 2014
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2014

CVE-2014-06627.1The SIP module in Cisco TelePresence Video Communication Server (VCS) before 8.1 allows remote attackers to cause a denial of service (proce CVE-2014-06634.3Cross-site scripting (XSS) vulnerability in the web framework in Cisco Secure Access Control System (ACS) allows remote attackers to inject CVE-2014-06646.8The server in Cisco Unity Connection allows remote authenticated users to cause a denial of service (CPU consumption) via unspecified IMAP c CVE-2014-06654.0The RBAC implementation in Cisco Identity Services Engine (ISE) Software does not properly verify privileges for support-bundle downloads, w CVE-2014-06664.3Directory traversal vulnerability in the Send Screen Capture implementation in Cisco Jabber 9.2(.1) and earlier on Windows allows remote att CVE-2014-06676.3The RMI interface in Cisco Secure Access Control System (ACS) does not properly enforce authorization requirements, which allows remote auth CVE-2014-06684.3Cross-site scripting (XSS) vulnerability in the portal in Cisco Secure Access Control System (ACS) allows remote attackers to inject arbitra CVE-2014-06695.0The Wireless Session Protocol (WSP) feature in the Gateway GPRS Support Node (GGSN) component on Cisco ASR 5000 series devices allows remote CVE-2014-06704.3Cross-site scripting (XSS) vulnerability in the Search and Play interface in Cisco MediaSense allows remote attackers to inject arbitrary we CVE-2014-06715.8Open redirect vulnerability in Cisco MediaSense allows remote attackers to redirect users to arbitrary web sites and conduct phishing attack CVE-2014-06724.0The Search and Play interface in Cisco MediaSense does not properly enforce authorization requirements, which allows remote authenticated us CVE-2014-06734.3Multiple cross-site scripting (XSS) vulnerabilities in the web interface on Cisco Video Surveillance 5000 HD IP Dome cameras allow remote at