Unscored severity · published Jan 19, 2012
CVE-2011-4659
Cisco TelePresence Software before TE 4.1.1 on the Cisco IP Video Phone E20 has a default password for the root account after an upgrade to TE 4.1.0, which makes it easier for…
–
CVSS
1.9%
EPSS
No
On KEV
Description
Cisco TelePresence Software before TE 4.1.1 on the Cisco IP Video Phone E20 has a default password for the root account after an upgrade to TE 4.1.0, which makes it easier for remote attackers to modify the configuration via an SSH session, aka Bug ID CSCtw69889, a different vulnerability than CVE-2011-2555.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.9% · higher than 80% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IV
IP Video Phone E20 · Cisco
All versions, or not specified · source: NVD
TE
Telepresence E20 Software · Cisco
through te4.1.1-cucm; te2.2; te2.2.1; te4.0.0; te4.1.0; te4.1.1; +4 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-4659
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-4659
Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120118-te
More from IP Video Phone E20
–
CVE-2013-3377
Cisco TelePresence TC Software before 5.1.7 and TE Software before 4.1.3 allow remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID…