Lucene search

[email protected]CVE-2011-0383

HistoryFeb 25, 2011 - 12:00 p.m.

CVE-2011-0383

2011-02-2512:00:18

CWE-287

[email protected]

web.nvd.nist.gov

cve-2011-0383

cisco

telepresence

recording

server

ctms

remote attackers

arbitrary code

crafted requests

8.1 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.105 Low

EPSS

Percentile

95.0%

JSON

The Java Servlet framework on Cisco TelePresence Recording Server devices with software 1.6.x before 1.6.2 and Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x does not require administrative authentication for unspecified actions, which allows remote attackers to execute arbitrary code via a crafted request, aka Bug IDs CSCtf42005 and CSCtf42008.

Affected configurations

NVD

Node

ciscotelepresence_recording_server_softwareMatch1.6.1

AND

ciscotelepresence_recording_server

Node

ciscotelepresence_multipoint_switch_softwareMatch1.0.4.0

ciscotelepresence_multipoint_switch_softwareMatch1.1.0

ciscotelepresence_multipoint_switch_softwareMatch1.1.1

ciscotelepresence_multipoint_switch_softwareMatch1.1.2

ciscotelepresence_multipoint_switch_softwareMatch1.5.0

ciscotelepresence_multipoint_switch_softwareMatch1.5.1

ciscotelepresence_multipoint_switch_softwareMatch1.5.2

ciscotelepresence_multipoint_switch_softwareMatch1.5.3

ciscotelepresence_multipoint_switch_softwareMatch1.5.4

ciscotelepresence_multipoint_switch_softwareMatch1.5.5

ciscotelepresence_multipoint_switch_softwareMatch1.5.6

ciscotelepresence_multipoint_switch_softwareMatch1.6.0

ciscotelepresence_multipoint_switch_softwareMatch1.6.1

ciscotelepresence_multipoint_switch_softwareMatch1.6.2

ciscotelepresence_multipoint_switch_softwareMatch1.6.3

ciscotelepresence_multipoint_switch_softwareMatch1.6.4

AND

ciscotelepresence_multipoint_switch

CPENameOperatorVersion
cisco:telepresence_recording_server_softwarecisco telepresence recording server softwareeq1.6.1
cisco:telepresence_recording_servercisco telepresence recording servereq*

CPE	Name	Operator	Version
cisco:telepresence_recording_server_software	cisco telepresence recording server software	eq	1.6.1
cisco:telepresence_recording_server	cisco telepresence recording server	eq	*