Unscored severity · published Feb 25, 2011
CVE-2011-0383
The Java Servlet framework on Cisco TelePresence Recording Server devices with software 1.6.x before 1.6.2 and Cisco TelePresence Multipoint Switch (CTMS) devices with software…
–
CVSS
6.5%
EPSS
No
On KEV
Description
The Java Servlet framework on Cisco TelePresence Recording Server devices with software 1.6.x before 1.6.2 and Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x does not require administrative authentication for unspecified actions, which allows remote attackers to execute arbitrary code via a crafted request, aka Bug IDs CSCtf42005 and CSCtf42008.
Exploitation
Is it being used?
Exploit prediction (EPSS)6.5% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TM
Telepresence Multipoint Switch · Cisco
All versions, or not specified · source: NVD
TM
Telepresence Multipoint Switch Software · Cisco
1.0.4.0; 1.1.0; 1.1.1; 1.1.2; 1.5.0; 1.5.1; +10 more · source: NVD
TR
Telepresence Recording Server · Cisco
All versions, or not specified · source: NVD
TR
Telepresence Recording Server Software · Cisco
1.6.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-0383
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-0383
Vendor Advisory
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e11d.shtml
www.cisco.com
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e14e.shtml
www.securityfocus.com
http://www.securityfocus.com/bid/46519
www.securitytracker.com
http://www.securitytracker.com/id?1025113
www.securitytracker.com
http://www.securitytracker.com/id?1025114
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/65602
More from Telepresence Multipoint Switch
–
CVE-2013-5516
The Media Snapshot implementation on Cisco TelePresence Multipoint Switch (CTMS) devices allows remote authenticated users to cause a denial of service (device reload) by sending…
–
CVE-2012-3073
The IP implementation on Cisco TelePresence Multipoint Switch before 1.8.1, Cisco TelePresence Manager before 1.9.0, and Cisco TelePresence Recording Server 1.8 and earlier allows…
–
CVE-2012-2486
The Cisco Discovery Protocol (CDP) implementation on Cisco TelePresence Multipoint Switch before 1.9.0, Cisco TelePresence Immersive Endpoint Devices before 1.9.1, Cisco…
–
CVE-2011-0385
The administrative web interface on Cisco TelePresence Recording Server devices with software 1.6.x and Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x,…
–
CVE-2011-0387
The administrative web interface on Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x allows remote authenticated users to cause a…