CVE-2015-0770: CRLF injection vulnerability in Cisco TelePresence TC 6.x before 6.3.4 and 7.x before 7.3.3 on Integrator C...

Security readout for executives and security teams

This CVE affects Cisco TelePresence SX20 devices running older TC software. A remote attacker could use a crafted URL to inject HTTP headers and enable HTTP response splitting. The supplied sources do not provide a severity score, exploitation evidence, or detailed business impact. Exposure is likely limited to organizations still operating Cisco TelePresence SX20 devices on vulnerable TC 6.x or 7.x releases, especially where the device web interface is reachable by untrusted users. Prioritize remediation where SX20 devices remain in service and reachable beyond trusted administration networks. This is an older, product-specific issue with no supplied exploitation evidence, but it is remotely reachable and has fixed versions identified. Mitigation focus: Identify all Cisco TelePresence SX20 devices in the environment.; Upgrade TC 6.x systems to 6.3.4 or later.; Upgrade TC 7.x systems to 7.3.3 or later..

Prepared

Jun 13, 2026, 22:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.