Unscored CVE-2015-0770 EUVD-2015-0783GHSA-pgxq-frjh-qv78

CRLF injection vulnerability in Cisco TelePresence TC 6.x before 6.3.4 and 7.x before 7.3.3 on Integrator C SX20 devices allows remote atta…

Published Jun 7, 2015 · Updated Aug 6, 2024 · Assigned by cisco

Description

CRLF injection vulnerability in Cisco TelePresence TC 6.x before 6.3.4 and 7.x before 7.3.3 on Integrator C SX20 devices allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL, aka Bug ID CSCut79341.

References

1032511 vdb-entry
20150605 Cisco TelePresence SX20 HTTP Response Splitting Vulnerability vendor-advisory