Unscored severity · published Feb 25, 2011
CVE-2011-0381
Cisco TelePresence Manager 1.2.x through 1.6.x allows remote attackers to perform unspecified actions and consequently execute arbitrary code via a crafted request to the Java RMI…
–
CVSS
5.5%
EPSS
No
On KEV
Description
Cisco TelePresence Manager 1.2.x through 1.6.x allows remote attackers to perform unspecified actions and consequently execute arbitrary code via a crafted request to the Java RMI interface, related to a "command injection vulnerability," aka Bug ID CSCtf97085.
Exploitation
Is it being used?
Exploit prediction (EPSS)5.5% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TM
Telepresence Manager · Cisco
1.2.0.0; 1.3.2; 1.4.0; 1.5.1; 1.5.2; 1.6.0; +3 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-0381
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-0381
Vendor Advisory
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e14f.shtml
www.securityfocus.com
http://www.securityfocus.com/bid/46526
www.securitytracker.com
http://www.securitytracker.com/id?1025111
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/65619
More from Telepresence Manager
–
CVE-2012-3073
The IP implementation on Cisco TelePresence Multipoint Switch before 1.8.1, Cisco TelePresence Manager before 1.9.0, and Cisco TelePresence Recording Server 1.8 and earlier allows…
–
CVE-2012-2486
The Cisco Discovery Protocol (CDP) implementation on Cisco TelePresence Multipoint Switch before 1.9.0, Cisco TelePresence Immersive Endpoint Devices before 1.9.1, Cisco…
–
CVE-2011-0379
Buffer overflow on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 1.6.x; Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x,…
–
CVE-2011-0380
Cisco TelePresence Manager 1.2.x through 1.6.x allows remote attackers to bypass authentication and invoke arbitrary methods via a malformed SOAP request, aka Bug ID CSCtc59562