CVE-2011-2585

2011-10-2000:55:00

CWE-94

[email protected]

web.nvd.nist.gov

cisco

show and share

vulnerability

cve-2011-2585

remote authenticated users

arbitrary code

video upload privileges

bug id cscto69857

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

AI Score

7.2

Confidence

Low

EPSS

0.003

Percentile

69.2%

JSON

Cisco Show and Share 5(2), 5.2(1), and 5.2(2) before 5.2(2.1) allows remote authenticated users to upload and execute arbitrary code by leveraging video upload privileges, aka Bug ID CSCto69857.

Affected configurations

Nvd

Node

ciscoshow_and_shareRange≤5.2\(2\)

ciscoshow_and_shareMatch5\(2\)

ciscoshow_and_shareMatch5.2\(1\)

VendorProductVersionCPE
ciscoshow_and_share*cpe:2.3:a:cisco:show_and_share:*:*:*:*:*:*:*:*
ciscoshow_and_share5(2)cpe:2.3:a:cisco:show_and_share:5\(2\):*:*:*:*:*:*:*
ciscoshow_and_share5.2(1)cpe:2.3:a:cisco:show_and_share:5.2\(1\):*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	show_and_share	*	cpe:2.3:a:cisco:show_and_share::::::::
cisco	show_and_share	5(2)	cpe:2.3:a:cisco:show_and_share:5\(2\):::::::*
cisco	show_and_share	5.2(1)	cpe:2.3:a:cisco:show_and_share:5.2\(1\):::::::*