CVE-2014-0661
The System Status Collection Daemon (SSCD) in Cisco TelePresence System 500-37, 1000, 1300-65,...
The System Status Collection Daemon (SSCD) in Cisco TelePresence System 500-37, 1000, 1300-65, and 3xxx before 1.10.2(42), and 500-32, 1300-47, TX1310 65, and TX9xxx before 6.0.4(11), allows remote attackers to execute arbitrary commands or cause a denial of service (stack memory corruption) via a crafted XML-RPC message, aka Bug ID CSCui32796.
Exploit likelihood
What each source reports
NVD Score used
The System Status Collection Daemon (SSCD) in Cisco TelePresence System 500-37, 1000, 1300-65, and 3xxx before 1.10.2(42), and 500-32, 1300-47, TX1310 65, and TX9xxx before 6.0.4(11), allows remote attackers to execute arbitrary commands or cause a denial of service (stack memory corruption) via a crafted XML-RPC message, aka Bug ID CSCui32796.
- Record
CVE-2014-0661- CVSS 2.0
- 8.3 High
AV:A/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-94
- Updated
- 2026-11-02
CVE List No score
The System Status Collection Daemon (SSCD) in Cisco TelePresence System 500-37, 1000, 1300-65, and 3xxx before 1.10.2(42), and 500-32, 1300-47, TX1310 65, and TX9xxx before 6.0.4(11), allows remote attackers to execute arbitrary commands or cause a denial of service (stack memory corruption) via a crafted XML-RPC message, aka Bug ID CSCui32796.
- Record
CVE-2014-0661- Updated
- 2026-11-02
EUVDEUVD-2014-0692 No score
The System Status Collection Daemon (SSCD) in Cisco TelePresence System 500-37, 1000, 1300-65, and 3xxx before 1.10.2(42), and 500-32, 1300-47, TX1310 65, and TX9xxx before 6.0.4(11), allows remote attackers to execute arbitrary commands or cause a denial of service (stack memory corruption) via a crafted XML-RPC message, aka Bug ID CSCui32796.
- Record
EUVD-2014-0692- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7g4g-9h43-3xvc No score
The System Status Collection Daemon (SSCD) in Cisco TelePresence System 500-37, 1000, 1300-65,...
The System Status Collection Daemon (SSCD) in Cisco TelePresence System 500-37, 1000, 1300-65, and 3xxx before 1.10.2(42), and 500-32, 1300-47, TX1310 65, and TX9xxx before 6.0.4(11), allows remote attackers to execute arbitrary commands or cause a denial of service (stack memory corruption) via a crafted XML-RPC message, aka Bug ID CSCui32796.
- Record
GHSA-7g4g-9h43-3xvc- Weakness
- CWE-94
- Updated
- 2026-11-02
Affected products
- cisco telepresence system 500-37
- cisco telepresence system 1000
- cisco telepresence system 1100
- cisco telepresence system 1300-65
- cisco telepresence system 3000
- cisco telepresence system 3010
- cisco telepresence system 3200
- cisco telepresence system 3210
- cisco telepresence system 500-32
- cisco telepresence system software
- cisco telepresence system tx1300 47
- cisco telepresence system tx1310 65
Show 2 moreShow less
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-0661 is a high vulnerability (CVSS 8.3) in Cisco Telepresence System 500-37, published January 22, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.30%, the 83rd percentile. No source names a fixed version.
References
osvdb.org/102362
tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140122-cts
exchange.xforce.ibmcloud.com/vulnerabilities/90624
securityfocus.com/bid/65071
secunia.com/advisories/56533
securitytracker.com/id/1029656
nvd.nist.gov/vuln/detail/CVE-2014-0661
github.com/advisories/GHSA-7g4g-9h43-3xvc