The web portal in TC software on Cisco TelePresence endpoints does not require an exact password match during a login attempt by a user who

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• cisco telepresence tc softwareall versions

Other highest-scoring records for the same primary product.

• CVE-2016-1387The XML API in TelePresence Codec (TC) 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.3.2, 7.3.3, 7.3.4, and 7.3.5 and Collaboration Endpoint (CE) 8.0.0, 8.0
  40Plan
• CVE-2014-2169Cisco TelePresence TC Software 4.x through 6.x before 6.2.0 and TE Software 4.x and 6.0 allow remote authenticated users to execute arbitrar
  37Monitor
• CVE-2014-2174Cisco TelePresence T, TelePresence TE, and TelePresence TC before 7.1 do not properly implement access control, which allows remote attacker
  33Monitor
• CVE-2013-3379The firewall subsystem in Cisco TelePresence TC Software before 4.2 does not properly implement rules that grant access to hosts, which allo
  33Monitor
• CVE-2015-0722The network drivers in Cisco TelePresence T, Cisco TelePresence TE, and Cisco TelePresence TC before 7.3.2 allow remote attackers to cause a
  32Monitor
• CVE-2013-3378Cisco TelePresence TC Software before 6.1 and TE Software before 4.1.3 allow remote attackers to cause a denial of service (temporary device
  32Monitor

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.

MITRE has no CAPEC/ATT&CK mapping for this CWE.