medium5.0
CVE-2015-0770
CRLF injection vulnerability in Cisco TelePresence TC 6.x before 6.3.4 and 7.x before 7.3.3 on Integrator C SX20 devices allows remote attackers to inject arbi…
Impact
CRLF injection vulnerability in Cisco TelePresence TC 6.x before 6.3.4 and 7.x before 7.3.3 on Integrator C SX20 devices allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL, aka Bug ID CSCut79341.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Telepresence Tc Software | Versions 6.3.0, 6.3.1, 6.3.2, 6.3.3, 7.1.0, 7.1.1 |