Unscored severity · published Aug 29, 2011
CVE-2011-2555
Cisco TelePresence Recording Server 1.7.2.x before 1.7.2.1 has a default password for the root administrator account, which makes it easier for remote attackers to modify the…
–
CVSS
3.4%
EPSS
No
On KEV
Description
Cisco TelePresence Recording Server 1.7.2.x before 1.7.2.1 has a default password for the root administrator account, which makes it easier for remote attackers to modify the configuration via an SSH session, aka Bug ID CSCtr76182.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.4% · higher than 89% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TR
Telepresence Recording Server Software · Cisco
1.7.2 · source: NVD
Affected product
TR
Telepresence Recording Server Software
Cisco
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-2555
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-2555
securitytracker.com
http://securitytracker.com/id?1025872
Vendor Advisory
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b8ad3f.shtml
www.securityfocus.com
http://www.securityfocus.com/bid/48932
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/68887
More from Telepresence Recording Server Software
–
CVE-2011-0383
The Java Servlet framework on Cisco TelePresence Recording Server devices with software 1.6.x before 1.6.2 and Cisco TelePresence Multipoint Switch (CTMS) devices with software…
–
CVE-2011-0385
The administrative web interface on Cisco TelePresence Recording Server devices with software 1.6.x and Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x,…
–
CVE-2011-0386
The XML-RPC implementation on Cisco TelePresence Recording Server devices with software 1.6.x and 1.7.x before 1.7.1 allows remote attackers to overwrite files and consequently…
–
CVE-2011-0382
The CGI subsystem on Cisco TelePresence Recording Server devices with software 1.6.x before 1.6.2 allows remote attackers to execute arbitrary commands via a request to TCP port…
–
CVE-2011-0391
Cisco TelePresence Recording Server devices with software 1.6.x allow remote attackers to cause a denial of service (thread consumption and device outage) via a malformed request,…