CVE-2011-0378: Improper Neutralization of Special Elements used in an OS Command

The XML-RPC implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote attackers to execute arbitrary commands via a TCP request, related to a "command injection vulnerability," aka Bug ID CSCtb52587...

PT-2011-2309

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Multipoint Switch CTMS versions 1.0.x through 1.6.x Description The administrative web interface on CTMS devices allows remote authenticated users to cause a denial of service or have unspecified other impact via vectors...

PT-2011-2304

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Recording Server versions 1.6.x before 1.6.2 Description The issue allows remote attackers to execute arbitrary commands on the device. This is related to a command injection vulnerability in the CGI subsystem when a request...

CVE-2011-0391: Undefined Security Weakness

Cisco TelePresence Recording Server devices with software 1.6.x allow remote attackers to cause a denial of service thread consumption and device outage via a malformed request, related to an "ad hoc recording" issue, aka Bug ID CSCtf97205...

CVE-2011-0384: Improper Authentication

The Java Servlet framework on Cisco TelePresence Multipoint Switch CTMS devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x does not require administrative authentication for unspecified actions, which allows remote attackers to execute arbitrary code via a crafted request, aka Bug ID CSCtf01253...

PT-2011-2306

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Multipoint Switch CTMS versions 1.0.x through 1.6.x Description The Java Servlet framework does not require administrative authentication for certain actions, allowing remote attackers to execute arbitrary code via a crafted...

PT-2011-2312

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Multipoint Switch CTMS versions 1.0.x through 1.7.0 Description The issue concerns the XML-RPC implementation, which allows remote attackers to cause a denial of service by sending a crafted request, resulting in a process...

PT-2011-2313

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Recording Server devices version 1.6.x Description The issue allows remote attackers to cause a denial of service, resulting in thread consumption and device outage, via a malformed request. This is related to an "ad hoc...

PT-2011-2308

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Recording Server versions 1.6.x through 1.7.x before 1.7.1 Description The issue allows remote attackers to overwrite files and execute arbitrary code via a malformed request. Recommendations For versions 1.6.x through 1.7.x...

PT-2011-2311

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Multipoint Switch CTMS versions 1.0.x through 1.6.x Description The issue allows remote attackers to cause a denial of service, resulting in a process crash, by sending a crafted Real-Time Transport Control Protocol RTCP UDP...

PT-2011-2299

Name of the Vulnerable Software and Affected Versions Cisco TelePresence endpoint devices versions 1.2.x through 1.6.x Description The issue allows remote attackers to cause a denial of service, resulting in a service crash, via a malformed SOAP request. This can occur in conjunction with a spoof...

PT-2011-2310

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Recording Server devices version 1.6.x Cisco TelePresence Multipoint Switch CTMS devices versions 1.0.x through 1.6.x Description The issue is related to improper restriction of remote access to the Java servlet RMI interfac...

CVE-2011-0385: Undefined Security Weakness

The administrative web interface on Cisco TelePresence Recording Server devices with software 1.6.x and Cisco TelePresence Multipoint Switch CTMS devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x allows remote attackers to create or overwrite arbitrary files, and possibly execute arbitrary cod...

CVE-2011-0392: Improper Authentication

Cisco TelePresence Recording Server devices with software 1.6.x do not require authentication for an XML-RPC interface, which allows remote attackers to perform unspecified actions via a session on TCP port 8080, aka Bug ID CSCtg35833...

CVE-2011-0380: Improper Authentication

Cisco TelePresence Manager 1.2.x through 1.6.x allows remote attackers to bypass authentication and invoke arbitrary methods via a malformed SOAP request, aka Bug ID CSCtc59562...

CVE-2011-0383: Improper Authentication

The Java Servlet framework on Cisco TelePresence Recording Server devices with software 1.6.x before 1.6.2 and Cisco TelePresence Multipoint Switch CTMS devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x does not require administrative authentication for unspecified actions, which allows remote...

PT-2011-2303

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Manager versions 1.2.x through 1.6.x Description The issue allows remote attackers to perform unspecified actions and consequently execute arbitrary code via a crafted request to the Java RMI interface, related to a command...

PT-2011-2302

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Manager versions 1.2.x through 1.6.x Description The issue allows remote attackers to bypass authentication and invoke arbitrary methods via a malformed SOAP request. Recommendations For versions 1.2.x through 1.6.x, update ...

PT-2011-2296

Name of the Vulnerable Software and Affected Versions Cisco TelePresence endpoint devices versions 1.2.x through 1.5.x Description The issue allows remote authenticated users to execute arbitrary commands via a malformed request, related to command injection vulnerabilities. Recommendations For...

CVE-2011-0389: Undefined Security Weakness

Cisco TelePresence Multipoint Switch CTMS devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x allow remote attackers to cause a denial of service process crash via a crafted Real-Time Transport Control Protocol RTCP UDP packet, aka Bug ID CSCth60993...