Lucene search

PRIOn knowledge basePRION:CVE-2011-4659

HistoryJan 19, 2012 - 3:55 p.m.

Default credentials

2012-01-1915:55:00

PRIOn knowledge base

www.prio-n.com

7 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.002 Low

EPSS

Percentile

56.5%

JSON

Cisco TelePresence Software before TE 4.1.1 on the Cisco IP Video Phone E20 has a default password for the root account after an upgrade to TE 4.1.0, which makes it easier for remote attackers to modify the configuration via an SSH session, aka Bug ID CSCtw69889, a different vulnerability than CVE-2011-2555.

CPENameOperatorVersion
telepresence_e20_softwareeq<= te4.1.1-cucm
telepresence_e20_softwareeq2.2.0-te
telepresence_e20_softwareeq2.2.1-te
telepresence_e20_softwareeq4.0.0-te
telepresence_e20_softwareeq4.1.0-te
telepresence_e20_softwareeq4.1.1-te
telepresence_e20_softwareeq4.0.0-tenc
telepresence_e20_softwareeq4.1.0-tenc
telepresence_e20_softwareeq4.1.1-tenc
telepresence_e20_softwareeqtenc4.1.1-cucm

Name	Operator	Version
telepresence_e20_software	eq	<= te4.1.1-cucm
telepresence_e20_software	eq	2.2.0-te
telepresence_e20_software	eq	2.2.1-te
telepresence_e20_software	eq	4.0.0-te
telepresence_e20_software	eq	4.1.0-te
telepresence_e20_software	eq	4.1.1-te
telepresence_e20_software	eq	4.0.0-tenc
telepresence_e20_software	eq	4.1.0-tenc
telepresence_e20_software	eq	4.1.1-tenc
telepresence_e20_software	eq	tenc4.1.1-cucm

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120118-te

7 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.002 Low

EPSS

Percentile

56.5%

JSON

Related for PRION:CVE-2011-4659