{"schema_version":"public-product-v1.1","generated_at":"2026-07-21T10:26:50Z","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","advisory":{"id":"cisco-sa-20150513-tp","slug":"cisco-sa-20150513-tp","vendor":"Cisco","title":"Command Injection Vulnerability in Multiple Cisco TelePresence Products","summary":"A vulnerability in the web framework of multiple Cisco TelePresence products could allow an authenticated, remote attacker to inject arbitrary commands that are executed with the privileges of the root user. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by authenticating to the device and submitting crafted input to the affected parameter in a web page. Administrative privileges are required in order to access the affected parameter. A successful exploit could allow an attacker to execute system commands with the privileges of the root user. Cisco has released software updates that address this vulnerability. Workarounds that mitigate this vulnerability are not available. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150513-tp","severity":"Critical","published_at":"2015-05-13T16:00:00Z","updated_at":"2015-05-13T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150513-tp","csaf_url":"https://sec.cloudapps.cisco.com/security/center/contentjson/CiscoSecurityAdvisory/cisco-sa-20150513-tp/csaf/cisco-sa-20150513-tp.json","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure."},"freshness":{"last_source_refreshed_at":"2026-07-21T05:16:34Z","latest_source_refresh_at":"2026-07-21T05:16:34Z","oldest_source_refresh_at":"2026-07-21T03:00:03Z","all_sources_fresh":true,"sources":[{"source":"cisco_advisories","label":"Cisco advisories","last_success_at":"2026-07-21T03:00:03Z","stale":false},{"source":"cisco_csaf","label":"Cisco CSAF","last_success_at":"2026-07-21T05:14:24Z","stale":false},{"source":"nvd_cves","label":"NVD CVEs","last_success_at":"2026-07-21T05:16:30Z","stale":false},{"source":"cisa_kev","label":"CISA KEV","last_success_at":"2026-07-21T05:16:31Z","stale":false},{"source":"first_epss","label":"EPSS","last_success_at":"2026-07-21T05:16:34Z","stale":false}]},"summary":{"cve_count":1,"visible_product_count":8,"public_evidence_count":8,"kev_count":0,"highest_epss":0.02891},"cves":[{"id":"CVE-2015-0713","kev":false,"epss":{"score":0.02891,"percentile":0.85351,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:47Z"}}],"public_evidence":[{"product":{"name":"Cisco TelePresence Server Software","slug":"cisco-telepresence-server-software","vendor":"Cisco"},"cve":{"id":"CVE-2015-0713"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:57:00Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco TelePresence Server Software","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.02891,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:47Z"},"published_at":"2015-05-13T16:00:00Z","updated_at":"2015-05-13T16:00:00Z","advisory_updated_at":"2015-05-13T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150513-tp","row_display_order":1},{"product":{"name":"Cisco TelePresence MCU Software","slug":"cisco-telepresence-mcu-software","vendor":"Cisco"},"cve":{"id":"CVE-2015-0713"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:57:00Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco TelePresence MCU Software","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.02891,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:47Z"},"published_at":"2015-05-13T16:00:00Z","updated_at":"2015-05-13T16:00:00Z","advisory_updated_at":"2015-05-13T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150513-tp","row_display_order":2},{"product":{"name":"Cisco TelePresence ISDN GW 3241","slug":"cisco-telepresence-isdn-gw-3241","vendor":"Cisco"},"cve":{"id":"CVE-2015-0713"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:57:00Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco TelePresence ISDN GW 3241","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.02891,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:47Z"},"published_at":"2015-05-13T16:00:00Z","updated_at":"2015-05-13T16:00:00Z","advisory_updated_at":"2015-05-13T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150513-tp","row_display_order":3},{"product":{"name":"Cisco TelePresence Supervisor MSE 8050 Software","slug":"cisco-telepresence-supervisor-mse-8050-software","vendor":"Cisco"},"cve":{"id":"CVE-2015-0713"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:57:00Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco TelePresence Supervisor MSE 8050 Software","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.02891,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:47Z"},"published_at":"2015-05-13T16:00:00Z","updated_at":"2015-05-13T16:00:00Z","advisory_updated_at":"2015-05-13T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150513-tp","row_display_order":4},{"product":{"name":"Cisco TelePresence Serial Gateway Series","slug":"cisco-telepresence-serial-gateway-series","vendor":"Cisco"},"cve":{"id":"CVE-2015-0713"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:57:00Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco TelePresence Serial Gateway Series","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.02891,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:47Z"},"published_at":"2015-05-13T16:00:00Z","updated_at":"2015-05-13T16:00:00Z","advisory_updated_at":"2015-05-13T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150513-tp","row_display_order":5},{"product":{"name":"Cisco TelePresence Advanced Media Gateway","slug":"cisco-telepresence-advanced-media-gateway","vendor":"Cisco"},"cve":{"id":"CVE-2015-0713"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:57:00Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco TelePresence Advanced Media Gateway","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.02891,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:47Z"},"published_at":"2015-05-13T16:00:00Z","updated_at":"2015-05-13T16:00:00Z","advisory_updated_at":"2015-05-13T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150513-tp","row_display_order":6},{"product":{"name":"Cisco TelePresence IP VCR Series","slug":"cisco-telepresence-ip-vcr-series","vendor":"Cisco"},"cve":{"id":"CVE-2015-0713"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:57:00Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco TelePresence IP VCR Series","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.02891,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:47Z"},"published_at":"2015-05-13T16:00:00Z","updated_at":"2015-05-13T16:00:00Z","advisory_updated_at":"2015-05-13T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150513-tp","row_display_order":7},{"product":{"name":"Cisco TelePresence IP Gateway Series","slug":"cisco-telepresence-ip-gateway-series","vendor":"Cisco"},"cve":{"id":"CVE-2015-0713"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:57:00Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco TelePresence IP Gateway Series","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.02891,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:47Z"},"published_at":"2015-05-13T16:00:00Z","updated_at":"2015-05-13T16:00:00Z","advisory_updated_at":"2015-05-13T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150513-tp","row_display_order":8}]}