{"id":"CVE-2014-2171","aliases":["EUVD-2014-2211","GHSA-4hc9-2vw2-236j"],"status":"published","title":"Heap-based buffer overflow in Cisco TelePresence TC Software 4.x through 6.x before 6.0.1 and TE...","description":"Heap-based buffer overflow in Cisco TelePresence TC Software 4.x through 6.x before 6.0.1 and TE Software 4.x and 6.0.x before 6.0.2 allows remote attackers to execute arbitrary code via crafted SIP packets, aka Bug ID CSCud81796.","severity":{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.03592,"percentile":0.89515,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-119"],"published":"2014-05-02T10:00:00Z","modified":"2026-06-17T00:06:10Z","products":[{"vendor":"cisco","product":"telepresence_tc_software"},{"vendor":"cisco","product":"telepresence_te_software"}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140430-tcte","tags":["vendor-advisory","x_refsource_CISCO","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-2171"},{"url":"https://github.com/advisories/GHSA-4hc9-2vw2-236j"}],"sources":{"cve":[{"id":"CVE-2014-2171","description":"Heap-based buffer overflow in Cisco TelePresence TC Software 4.x through 6.x before 6.0.1 and TE Software 4.x and 6.0.x before 6.0.2 allows remote attackers to execute arbitrary code via crafted SIP packets, aka Bug ID CSCud81796.","status":"published","published":"2014-05-02T10:00:00Z","modified":"2024-08-06T10:05:59.949Z","updated_at":"2026-11-02T14:33:43.566796Z"}],"euvd":[{"id":"EUVD-2014-2211","description":"Heap-based buffer overflow in Cisco TelePresence TC Software 4.x through 6.x before 6.0.1 and TE Software 4.x and 6.0.x before 6.0.2 allows remote attackers to execute arbitrary code via crafted SIP packets, aka Bug ID CSCud81796.","status":"published","published":"2014-05-02T10:00:00Z","modified":"2024-08-06T10:05:59Z","updated_at":"2026-11-03T01:57:15.270389Z"}],"ghsa":[{"id":"GHSA-4hc9-2vw2-236j","title":"Heap-based buffer overflow in Cisco TelePresence TC Software 4.x through 6.x before 6.0.1 and TE...","description":"Heap-based buffer overflow in Cisco TelePresence TC Software 4.x through 6.x before 6.0.1 and TE Software 4.x and 6.0.x before 6.0.2 allows remote attackers to execute arbitrary code via crafted SIP packets, aka Bug ID CSCud81796.","status":"published","published":"2022-05-17T04:45:12Z","modified":"2023-01-28T05:02:28Z","cwes":["CWE-119"],"updated_at":"2026-11-02T14:43:47.163465Z"}],"nvd":[{"id":"CVE-2014-2171","description":"Heap-based buffer overflow in Cisco TelePresence TC Software 4.x through 6.x before 6.0.1 and TE Software 4.x and 6.0.x before 6.0.2 allows remote attackers to execute arbitrary code via crafted SIP packets, aka Bug ID CSCud81796.","status":"published","published":"2014-05-02T10:55:08.367Z","modified":"2026-06-17T00:06:10.68Z","cvss":[{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:02:54.082915Z"}]}}