CVE-2011-4659

Cisco TelePresence TE Software on Cisco IP Video Phone E20 (upgraded to TE 4.1.0) may introduce an unsecured default root account, enabling an unauthenticated, remote attacker to log in via SSH and modify device configuration. The vulnerability arises from an incomplete disabling of the root acco...