Unscored severity · published Feb 25, 2011
CVE-2011-0373
The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote authenticated users to execute arbitrary commands via a malformed…
–
CVSS
2.8%
EPSS
No
On KEV
Description
The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote authenticated users to execute arbitrary commands via a malformed request, related to "command injection vulnerabilities," aka Bug ID CSCtb31685.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.8% · higher than 86% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TS
Telepresence System 1000 · Cisco
All versions, or not specified · source: NVD
TS
Telepresence System 1100 · Cisco
All versions, or not specified · source: NVD
TS
Telepresence System 1300 Series · Cisco
All versions, or not specified · source: NVD
TS
Telepresence System 3000 · Cisco
All versions, or not specified · source: NVD
TS
Telepresence System 3200 Series · Cisco
All versions, or not specified · source: NVD
TS
Telepresence System 500 Series · Cisco
All versions, or not specified · source: NVD
TS
Telepresence System Software · Cisco
1.2.3; 1.3.2; 1.4.7; 1.5.1; 1.5.3; 1.5.10; +23 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-0373
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-0373
Vendor Advisory
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e152.shtml
www.securitytracker.com
http://www.securitytracker.com/id?1025112
More from Telepresence System 1000
–
CVE-2014-0661
The System Status Collection Daemon (SSCD) in Cisco TelePresence System 500-37, 1000, 1300-65, and 3xxx before 1.10.2(42), and 500-32, 1300-47, TX1310 65, and TX9xxx before…
–
CVE-2011-0374
The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote authenticated users to execute arbitrary commands via a malformed…
–
CVE-2011-0375
The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.6.x allows remote authenticated users to execute arbitrary commands via a malformed…
–
CVE-2011-0372
The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote attackers to execute arbitrary commands via a malformed request,…
–
CVE-2011-0377
Cisco TelePresence endpoint devices with software 1.2.x through 1.6.x allow remote attackers to cause a denial of service (service crash) via a malformed SOAP request in…