CVE-2011-0373

Cisco TelePresence endpoint devices running 1.2.x–1.5.x are affected by CVE-2011-0373 (CGI Command Injection) due to a malformed CGI request over HTTPS (port 443). An authenticated remote attacker could execute arbitrary commands with elevated privileges on vulnerable endpoints. The Cisco advisor...