CVE-2015-0770

CRLF injection vulnerability in Cisco TelePresence TC 6.x before 6.3.4 and 7.x before 7.3.3 on Integrator C SX20 devices allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL, aka Bug ID CSCut79341.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:P/A:N
ciscoCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 50%
VendorProductVersion
ciscotelepresence_tc_software
6.3.0
ciscotelepresence_tc_software
6.3.1
ciscotelepresence_tc_software
6.3.2
ciscotelepresence_tc_software
6.3.3
ciscotelepresence_tc_software
7.1.0
ciscotelepresence_tc_software
7.1.1
ciscotelepresence_tc_software
7.1.2
ciscotelepresence_tc_software
7.1.3
ciscotelepresence_tc_software
7.1.4
ciscotelepresence_tc_software
7.2.0
ciscotelepresence_tc_software
7.2.1
ciscotelepresence_tc_software
7.3.0
ciscotelepresence_tc_software
7.3.1
ciscotelepresence_tc_software
7.3.2
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://tools.cisco.com/security/center/viewAlert.x?alertId=39210
http://www.securitytracker.com/id/1032511
http://tools.cisco.com/security/center/viewAlert.x?alertId=39210
http://www.securitytracker.com/id/1032511