CVE-2011-0392

2011-02-2512:00:19

CWE-287

[email protected]

web.nvd.nist.gov

cisco

telepresence

recording server

xml-rpc

authentication bypass

cve-2011-0392

nvd

7.2 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.006 Low

EPSS

Percentile

78.0%

JSON

Cisco TelePresence Recording Server devices with software 1.6.x do not require authentication for an XML-RPC interface, which allows remote attackers to perform unspecified actions via a session on TCP port 8080, aka Bug ID CSCtg35833.

Affected configurations

NVD

Node

ciscotelepresence_recording_server_softwareMatch1.6.1

ciscotelepresence_recording_server_softwareMatch1.6.2

ciscotelepresence_recording_server_softwareMatch1.6.3

AND

ciscotelepresence_recording_server

CPENameOperatorVersion
cisco:telepresence_recording_server_softwarecisco telepresence recording server softwareeq1.6.1
cisco:telepresence_recording_server_softwarecisco telepresence recording server softwareeq1.6.2
cisco:telepresence_recording_server_softwarecisco telepresence recording server softwareeq1.6.3
cisco:telepresence_recording_servercisco telepresence recording servereq*

CPE	Name	Operator	Version
cisco:telepresence_recording_server_software	cisco telepresence recording server software	eq	1.6.1
cisco:telepresence_recording_server_software	cisco telepresence recording server software	eq	1.6.2
cisco:telepresence_recording_server_software	cisco telepresence recording server software	eq	1.6.3
cisco:telepresence_recording_server	cisco telepresence recording server	eq	*