1373 matches found
CVE-2011-0392
Cisco TelePresence Recording Server devices with software 1.6.x do not require authentication for an XML-RPC interface, which allows remote attackers to perform unspecified actions via a session on TCP port 8080, aka Bug ID CSCtg35833...
CVE-2011-0378
The XML-RPC implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote attackers to execute arbitrary commands via a TCP request, related to a "command injection vulnerability," aka Bug ID CSCtb52587...
CVE-2011-0386
The XML-RPC implementation on Cisco TelePresence Recording Server devices with software 1.6.x and 1.7.x before 1.7.1 allows remote attackers to overwrite files and consequently execute arbitrary code via a malformed request, aka Bug ID CSCti50739...
Command injection
The XML-RPC implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote attackers to execute arbitrary commands via a TCP request, related to a "command injection vulnerability," aka Bug ID CSCtb52587...
Authentication flaw
Cisco TelePresence Recording Server devices with software 1.6.x do not require authentication for an XML-RPC interface, which allows remote attackers to perform unspecified actions via a session on TCP port 8080, aka Bug ID CSCtg35833...
Design/Logic Flaw
The XML-RPC implementation on Cisco TelePresence Multipoint Switch CTMS devices with software 1.0.x, 1.1.x, 1.5.x, 1.6.x, and 1.7.0 allows remote attackers to cause a denial of service process crash via a crafted request, aka Bug ID CSCtj44534...
Design/Logic Flaw
The XML-RPC implementation on Cisco TelePresence Recording Server devices with software 1.6.x and 1.7.x before 1.7.1 allows remote attackers to overwrite files and consequently execute arbitrary code via a malformed request, aka Bug ID CSCti50739...
CVE-2011-0378
The XML-RPC implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote attackers to execute arbitrary commands via a TCP request, related to a "command injection vulnerability," aka Bug ID CSCtb52587...
CVE-2011-0390
The XML-RPC implementation on Cisco TelePresence Multipoint Switch CTMS devices with software 1.0.x, 1.1.x, 1.5.x, 1.6.x, and 1.7.0 allows remote attackers to cause a denial of service process crash via a crafted request, aka Bug ID CSCtj44534...
CVE-2011-0378
Summary: CVE-2011-0378 affects Cisco TelePresence endpoint devices running 1.2.x–1.5.x. The vulnerability is an XML-RPC Command Injection that could allow an unauthenticated attacker within the broadcast domain to execute arbitrary commands with elevated privileges. Exploitation would involve sen...
CVE-2011-0390
CVE-2011-0390 affects Cisco TelePresence Multipoint Switch (CTMS). A remote, unauthenticated attacker can crash the call-geometry process by sending a crafted XML-RPC request to the device (TCP port 9000), causing a denial of service. Affected software versions include CTMS 1.0.x, 1.1.x, 1.5.x, 1...
CVE-2011-0392
CVE-2011-0392 affects Cisco TelePresence Recording Server 1.6.x with an unauthenticated XML-RPC interface exposed on TCP port 8080. The connected Cisco advisory documents that this XML-RPC Interface vulnerability allows an unauthenticated remote attacker to perform actions that should be restrict...
CVE-2011-0386
CVE-2011-0386 affects Cisco TelePresence Recording Server devices running 1.6.x and 1.7.x (before 1.7.1). The issue is an XML-RPC Arbitrary File Overwrite vulnerability that allows an unauthenticated, remote attacker to overwrite files and consequently execute arbitrary code via a malformed reque...
CVE-2011-0386
The XML-RPC implementation on Cisco TelePresence Recording Server devices with software 1.6.x and 1.7.x before 1.7.1 allows remote attackers to overwrite files and consequently execute arbitrary code via a malformed request, aka Bug ID CSCti50739...
PT-2011-2312
Name of the Vulnerable Software and Affected Versions Cisco TelePresence Multipoint Switch CTMS versions 1.0.x through 1.7.0 Description The issue concerns the XML-RPC implementation, which allows remote attackers to cause a denial of service by sending a crafted request, resulting in a process...
PT-2011-2314
Name of the Vulnerable Software and Affected Versions Cisco TelePresence Recording Server devices with software 1.6.x Description The issue concerns a lack of authentication for an XML-RPC interface, allowing remote attackers to perform unspecified actions via a session on TCP port 8080...
CVE-2011-0378: Improper Neutralization of Special Elements used in an OS Command
The XML-RPC implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote attackers to execute arbitrary commands via a TCP request, related to a "command injection vulnerability," aka Bug ID CSCtb52587...
CVE-2011-0392: Improper Authentication
Cisco TelePresence Recording Server devices with software 1.6.x do not require authentication for an XML-RPC interface, which allows remote attackers to perform unspecified actions via a session on TCP port 8080, aka Bug ID CSCtg35833...
CVE-2011-0390: Undefined Security Weakness
The XML-RPC implementation on Cisco TelePresence Multipoint Switch CTMS devices with software 1.0.x, 1.1.x, 1.5.x, 1.6.x, and 1.7.0 allows remote attackers to cause a denial of service process crash via a crafted request, aka Bug ID CSCtj44534...
CVE-2011-0386: Improper Control of Generation of Code
The XML-RPC implementation on Cisco TelePresence Recording Server devices with software 1.6.x and 1.7.x before 1.7.1 allows remote attackers to overwrite files and consequently execute arbitrary code via a malformed request, aka Bug ID CSCti50739...