CVE-2010-4305

Cisco Unified Videoconferencing (UVC) System and related gateways/mcu (models 3545, 5110, 5115, 5230; 3527 PRI Gateway; 3522 BRI Gateway; 3515 MCU) improperly store credentials in HTTP cookies used for web interfaces, enabling remote attackers to read a cookie in cleartext or base64-encoded clear...

CVE-2010-3037

CVE-2010-3037 affects Cisco Unified Videoconferencing (UVC) products (5110/5115 Linux; 3545, 5230 VxWorks; 3527 PRI Gateway; 3522 BRI Gateway; 3515 MCU). The flaw is a remote command-injection in the web interface via the /goform/websXMLAdminRequestCgi.cgi, allowing an authenticated administrator...

CVE-2010-4304

The CVE affects Cisco Unified Videoconferencing (UVC) System components: 3545, 5110, 5115, 5230; 3527 PRI Gateway; 3522 BRI Gateway; and 3515 MCU. Root cause is predictable session IDs based on time values, enabling remote attackers to hijack sessions through brute-force. No exploit details are p...