CVE-2014-0661: The System Status Collection Daemon (SSCD) in Cisco TelePresence System 500-37, 1000, 1300-65, and 3xxx bef...

Security readout for executives and security teams

CVE-2014-0661 is a remote command execution and denial-of-service flaw in Cisco TelePresence System software. A remote attacker could send a crafted XML-RPC message to the SSCD service, potentially running commands or crashing affected systems. This matters most where legacy Cisco TelePresence units remain deployed or reachable from untrusted networks. Exposure is likely limited to organizations still operating the named Cisco TelePresence systems on vulnerable software. Internet or broadly reachable management/control paths would increase urgency, but the source bundle does not confirm default exposure or authentication requirements. Treat this as a high-priority legacy infrastructure issue if the named Cisco TelePresence systems remain in service. The business risk is remote compromise or meeting-room service disruption, but urgency depends on asset presence, version, and network reachability. Mitigation focus: Upgrade affected TelePresence systems to Cisco fixed versions named in the CVE record.; Use 1.10.2(42) or later for CTS 500-37, 1000, 1300-65, and 3xxx.; Use 6.0.4(11) or later for CTS 500-32, 1300-47, TX1310 65, and TX9xxx..

Prepared

Jun 14, 2026, 14:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.