CVE:CVE-2014-0661
CNNVD:CNNVD-201401-427
Cisco TelePresence System 500-37等都是美国思科（Cisco）公司的被称为网真系统的视频会议解决方案。该方案提供音频、视频空间等组件，可为远程参会者提供一个面对面的虚拟会议室效果。
多款Cisco TelePresence System产品中的System Status Collection Daemon代码中存在任意命令执行漏洞。远程攻击者可通过发送特制的XML-RPC消息利用该漏洞执行任意命令或导致拒绝服务（栈内存破坏）。以下版本受到影响：Cisco TelePresence System 500-37, 1000，1300-65，3xxx 1.10.2(42)之前的版本，500-32，1300-47，TX1310 65，TX9xxx 6.0.4(11)之前的版本。
solution:Upgrade cisco telepresence_system_software to a higher version than 1.10.1\(43\,1.5.10(3648,1.7.5(42,1.7.6(4,1.8.0(55,1.8.1(34,1.8.2(11,1.8.3(4,1.8.4(13,1.8.5(4,1.9.0(46,1.9.1(68,1.9.2(19,1.9.3(44,1.9.4(19,1.9.5(7,1.9.6(2,1.9.6.1(3,1.10.0,1.10.0(259,1.10.1,6.0.3\(33\,6.0.0.1(4,6.0.1(50,6.0.2(28,6.1.0(90,and avoid the version (,1.10.1\(43\)],1.5.10(3648),1.7.5(42),1.7.6(4),1.8.0(55),1.8.1(34),1.8.2(11),1.8.3(4),1.8.4(13),1.8.5(4),1.9.0(46),1.9.1(68),1.9.2(19),1.9.3(44),1.9.4(19),1.9.5(7),1.9.6(2),1.9.6.1(3),1.10.0,1.10.0(259),1.10.1,(,6.0.3\(33\)],6.0.0.1(4),6.0.1(50),6.0.2(28),6.1.0(90); Upgrade cisco telepresence_system_1000 to a higher version than -; Upgrade cisco telepresence_system_1300-65 to a higher version than -; Upgrade cisco telepresence_system_3000 to a higher version than *; Upgrade cisco telepresence_system_3010 to a higher version than *; Upgrade cisco telepresence_system_3200 to a higher version than *; Upgrade cisco telepresence_system_3210 to a higher version than *; Upgrade cisco telepresence_system_500-37 to a higher version than -; Upgrade cisco telepresence_system_1100 to a higher version than -; Upgrade cisco telepresence_system_500-32 to a higher version than -; Upgrade cisco telepresence_system_tx1300_47 to a higher version than *; Upgrade cisco telepresence_system_tx1310_65 to a higher version than *; Upgrade cisco telepresence_system_tx9000 to a higher version than *; Upgrade cisco telepresence_system_tx9200 to a higher version than *