CVE-2011-2544

2011-09-2310:55:02

CWE-79

[email protected]

web.nvd.nist.gov

cisco

telepresence

mxp series

f9.1

xss

vulnerability

csrf

cisco security

nvd

cve-2011-2544

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

6.1 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.7%

JSON

Cross-site scripting (XSS) vulnerability in the web interface in Cisco TelePresence System MXP Series F9.1 and earlier allows remote authenticated users to inject arbitrary web script or HTML via a crafted Call ID, as demonstrated by resultant cross-site request forgery (CSRF) attacks that change passwords or cause a denial of service, aka Bug ID CSCtq46488.

Affected configurations

NVD

Node

ciscotelepresence_system_1000_mxp

ciscotelepresence_system_1700_mxp

AND

ciscotelepresence_mxp_softwareRange≤f9.1

ciscotelepresence_mxp_softwareMatchf8.2

ciscotelepresence_mxp_softwareMatchf9.0

ciscotelepresence_mxp_softwareMatchf9.0.1

ciscotelepresence_mxp_softwareMatchf9.0.2

CPENameOperatorVersion
cisco:telepresence_system_1000_mxpcisco telepresence system 1000 mxpeq*
cisco:telepresence_system_1700_mxpcisco telepresence system 1700 mxpeq*
cisco:telepresence_mxp_softwarecisco telepresence mxp softwarelef9.1
cisco:telepresence_mxp_softwarecisco telepresence mxp softwareeqf8.2
cisco:telepresence_mxp_softwarecisco telepresence mxp softwareeqf9.0
cisco:telepresence_mxp_softwarecisco telepresence mxp softwareeqf9.0.1
cisco:telepresence_mxp_softwarecisco telepresence mxp softwareeqf9.0.2

CPE	Name	Operator	Version
cisco:telepresence_system_1000_mxp	cisco telepresence system 1000 mxp	eq	*
cisco:telepresence_system_1700_mxp	cisco telepresence system 1700 mxp	eq	*
cisco:telepresence_mxp_software	cisco telepresence mxp software	le	f9.1
cisco:telepresence_mxp_software	cisco telepresence mxp software	eq	f8.2
cisco:telepresence_mxp_software	cisco telepresence mxp software	eq	f9.0
cisco:telepresence_mxp_software	cisco telepresence mxp software	eq	f9.0.1
cisco:telepresence_mxp_software	cisco telepresence mxp software	eq	f9.0.2