Unscored severity · published Feb 25, 2011
CVE-2011-0388
Cisco TelePresence Recording Server devices with software 1.6.x and Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x do not…
–
CVSS
2.6%
EPSS
No
On KEV
Description
Cisco TelePresence Recording Server devices with software 1.6.x and Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x do not properly restrict remote access to the Java servlet RMI interface, which allows remote attackers to cause a denial of service (memory consumption and web outage) via multiple crafted requests, aka Bug IDs CSCtg35830 and CSCtg35825.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.6% · higher than 85% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TM
Telepresence Multipoint Switch · Cisco
All versions, or not specified · source: NVD
TM
Telepresence Multipoint Switch Software · Cisco
1.0.4.0; 1.1.0; 1.1.1; 1.1.2; 1.5.0; 1.5.1; +10 more · source: NVD
TR
Telepresence Recording Server · Cisco
All versions, or not specified · source: NVD
TR
Telepresence Recording Server Software · Cisco
1.6.1; 1.6.2; 1.6.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-0388
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-0388
Vendor Advisory
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e11d.shtml
Vendor Advisory
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e14e.shtml
www.securityfocus.com
http://www.securityfocus.com/bid/46523
www.securitytracker.com
http://www.securitytracker.com/id?1025113
www.securitytracker.com
http://www.securitytracker.com/id?1025114
More from Telepresence Multipoint Switch
–
CVE-2013-5516
The Media Snapshot implementation on Cisco TelePresence Multipoint Switch (CTMS) devices allows remote authenticated users to cause a denial of service (device reload) by sending…
–
CVE-2012-3073
The IP implementation on Cisco TelePresence Multipoint Switch before 1.8.1, Cisco TelePresence Manager before 1.9.0, and Cisco TelePresence Recording Server 1.8 and earlier allows…
–
CVE-2012-2486
The Cisco Discovery Protocol (CDP) implementation on Cisco TelePresence Multipoint Switch before 1.9.0, Cisco TelePresence Immersive Endpoint Devices before 1.9.1, Cisco…
–
CVE-2011-0385
The administrative web interface on Cisco TelePresence Recording Server devices with software 1.6.x and Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x,…
–
CVE-2011-0387
The administrative web interface on Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x allows remote authenticated users to cause a…