CVE-2013-3379
The firewall subsystem in Cisco TelePresence TC Software before 4.2 does not properly implement...
The firewall subsystem in Cisco TelePresence TC Software before 4.2 does not properly implement rules that grant access to hosts, which allows remote attackers to obtain shell access with root privileges by leveraging connectivity to the management network, aka Bug ID CSCts37781.
Exploit likelihood
What each source reports
NVD Score used
The firewall subsystem in Cisco TelePresence TC Software before 4.2 does not properly implement rules that grant access to hosts, which allows remote attackers to obtain shell access with root privileges by leveraging connectivity to the management network, aka Bug ID CSCts37781.
- Record
CVE-2013-3379- CVSS 2.0
- 8.3 High
AV:A/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
The firewall subsystem in Cisco TelePresence TC Software before 4.2 does not properly implement rules that grant access to hosts, which allows remote attackers to obtain shell access with root privileges by leveraging connectivity to the management network, aka Bug ID CSCts37781.
- Record
CVE-2013-3379- Updated
- 2026-11-02
EUVDEUVD-2013-3314 No score
The firewall subsystem in Cisco TelePresence TC Software before 4.2 does not properly implement rules that grant access to hosts, which allows remote attackers to obtain shell access with root privileges by leveraging connectivity to the management network, aka Bug ID CSCts37781.
- Record
EUVD-2013-3314- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-h3x8-v5rw-g7h2 No score
The firewall subsystem in Cisco TelePresence TC Software before 4.2 does not properly implement...
The firewall subsystem in Cisco TelePresence TC Software before 4.2 does not properly implement rules that grant access to hosts, which allows remote attackers to obtain shell access with root privileges by leveraging connectivity to the management network, aka Bug ID CSCts37781.
- Record
GHSA-h3x8-v5rw-g7h2- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-3379 is a high vulnerability (CVSS 8.3) in Cisco Telepresence Tc Software, published June 21, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.00%, the 63rd percentile. No source names a fixed version.