CVE-2014-2172

Name of the Vulnerable Software and Affected Versions Cisco TelePresence TC Software versions 4.x through 5.x Cisco TelePresence TE Software versions 4.x through 6.0

Description The issue is related to a buffer overflow that allows local users to gain privileges. This is due to the improper handling of the u-boot compiler flag for internal executable files.

Recommendations For Cisco TelePresence TC Software versions 4.x through 5.x, update to a version that properly handles the u-boot compiler flag. For Cisco TelePresence TE Software versions 4.x through 6.0, update to a version that properly handles the u-boot compiler flag. As a temporary workaround, consider restricting access to internal executable files until a patch is available.