Lucene search

[email protected]NVD:CVE-2011-0388

HistoryFeb 25, 2011 - 12:00 p.m.

CVE-2011-0388

2011-02-2512:00:18

CWE-399

[email protected]

web.nvd.nist.gov

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.7

Confidence

Low

EPSS

0.008

Percentile

81.4%

JSON

Cisco TelePresence Recording Server devices with software 1.6.x and Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x do not properly restrict remote access to the Java servlet RMI interface, which allows remote attackers to cause a denial of service (memory consumption and web outage) via multiple crafted requests, aka Bug IDs CSCtg35830 and CSCtg35825.

Affected configurations

Nvd

Node

ciscotelepresence_recording_server_softwareMatch1.6.1

ciscotelepresence_recording_server_softwareMatch1.6.2

ciscotelepresence_recording_server_softwareMatch1.6.3

AND

ciscotelepresence_recording_server

Node

ciscotelepresence_multipoint_switch_softwareMatch1.0.4.0

ciscotelepresence_multipoint_switch_softwareMatch1.1.0

ciscotelepresence_multipoint_switch_softwareMatch1.1.1

ciscotelepresence_multipoint_switch_softwareMatch1.1.2

ciscotelepresence_multipoint_switch_softwareMatch1.5.0

ciscotelepresence_multipoint_switch_softwareMatch1.5.1

ciscotelepresence_multipoint_switch_softwareMatch1.5.2

ciscotelepresence_multipoint_switch_softwareMatch1.5.3

ciscotelepresence_multipoint_switch_softwareMatch1.5.4

ciscotelepresence_multipoint_switch_softwareMatch1.5.5

ciscotelepresence_multipoint_switch_softwareMatch1.5.6

ciscotelepresence_multipoint_switch_softwareMatch1.6.0

ciscotelepresence_multipoint_switch_softwareMatch1.6.1

ciscotelepresence_multipoint_switch_softwareMatch1.6.2

ciscotelepresence_multipoint_switch_softwareMatch1.6.3

ciscotelepresence_multipoint_switch_softwareMatch1.6.4

AND

ciscotelepresence_multipoint_switch

VendorProductVersionCPE
ciscotelepresence_recording_server_software1.6.1cpe:2.3:a:cisco:telepresence_recording_server_software:1.6.1:*:*:*:*:*:*:*
ciscotelepresence_recording_server_software1.6.2cpe:2.3:a:cisco:telepresence_recording_server_software:1.6.2:*:*:*:*:*:*:*
ciscotelepresence_recording_server_software1.6.3cpe:2.3:a:cisco:telepresence_recording_server_software:1.6.3:*:*:*:*:*:*:*
ciscotelepresence_recording_server*cpe:2.3:h:cisco:telepresence_recording_server:*:*:*:*:*:*:*:*
ciscotelepresence_multipoint_switch_software1.0.4.0cpe:2.3:a:cisco:telepresence_multipoint_switch_software:1.0.4.0:*:*:*:*:*:*:*
ciscotelepresence_multipoint_switch_software1.1.0cpe:2.3:a:cisco:telepresence_multipoint_switch_software:1.1.0:*:*:*:*:*:*:*
ciscotelepresence_multipoint_switch_software1.1.1cpe:2.3:a:cisco:telepresence_multipoint_switch_software:1.1.1:*:*:*:*:*:*:*
ciscotelepresence_multipoint_switch_software1.1.2cpe:2.3:a:cisco:telepresence_multipoint_switch_software:1.1.2:*:*:*:*:*:*:*
ciscotelepresence_multipoint_switch_software1.5.0cpe:2.3:a:cisco:telepresence_multipoint_switch_software:1.5.0:*:*:*:*:*:*:*
ciscotelepresence_multipoint_switch_software1.5.1cpe:2.3:a:cisco:telepresence_multipoint_switch_software:1.5.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	telepresence_recording_server_software	1.6.1	cpe:2.3:a:cisco:telepresence_recording_server_software:1.6.1:::::::*
cisco	telepresence_recording_server_software	1.6.2	cpe:2.3:a:cisco:telepresence_recording_server_software:1.6.2:::::::*
cisco	telepresence_recording_server_software	1.6.3	cpe:2.3:a:cisco:telepresence_recording_server_software:1.6.3:::::::*
cisco	telepresence_recording_server	*	cpe:2.3:h:cisco:telepresence_recording_server::::::::
cisco	telepresence_multipoint_switch_software	1.0.4.0	cpe:2.3:a:cisco:telepresence_multipoint_switch_software:1.0.4.0:::::::*
cisco	telepresence_multipoint_switch_software	1.1.0	cpe:2.3:a:cisco:telepresence_multipoint_switch_software:1.1.0:::::::*
cisco	telepresence_multipoint_switch_software	1.1.1	cpe:2.3:a:cisco:telepresence_multipoint_switch_software:1.1.1:::::::*
cisco	telepresence_multipoint_switch_software	1.1.2	cpe:2.3:a:cisco:telepresence_multipoint_switch_software:1.1.2:::::::*
cisco	telepresence_multipoint_switch_software	1.5.0	cpe:2.3:a:cisco:telepresence_multipoint_switch_software:1.5.0:::::::*
cisco	telepresence_multipoint_switch_software	1.5.1	cpe:2.3:a:cisco:telepresence_multipoint_switch_software:1.5.1:::::::*