EUVD-2011-0406

Malware in sbrugna...

Authentication flaw

Cisco TelePresence Manager 1.2.x through 1.6.x allows remote attackers to bypass authentication and invoke arbitrary methods via a malformed SOAP request, aka Bug ID CSCtc59562...

CVE-2011-0380

CVE-2011-0380 affects Cisco TelePresence Manager versions 1.2.x–1.6.x. The issue is a SOAP authentication bypass: a malformed SOAP request can allow a remote, unauthenticated attacker to invoke arbitrary SOAP methods, potentially compromising the device. The Cisco advisory notes three related vul...