CVE-2010-4305

Cisco Unified Videoconferencing (UVC) System and related gateways/mcu (models 3545, 5110, 5115, 5230; 3527 PRI Gateway; 3522 BRI Gateway; 3515 MCU) improperly store credentials in HTTP cookies used for web interfaces, enabling remote attackers to read a cookie in cleartext or base64-encoded clear...

CVE-2010-4302

Cisco CVE-2010-4302 affects Cisco Unified Videoconferencing (UVC) System 5110/5115 on Linux, where /opt/rv/Versions/CurrentVersion/Mcu/Config/Mcu.val uses a weak hashing algorithm for administrator and operator passwords. This weak hashing enables local users to recover cleartext passwords of adm...

CVE-2010-3037

CVE-2010-3037 affects Cisco Unified Videoconferencing (UVC) products (5110/5115 Linux; 3545, 5230 VxWorks; 3527 PRI Gateway; 3522 BRI Gateway; 3515 MCU). The flaw is a remote command-injection in the web interface via the /goform/websXMLAdminRequestCgi.cgi, allowing an authenticated administrator...

CVE-2010-4304

The CVE affects Cisco Unified Videoconferencing (UVC) System components: 3545, 5110, 5115, 5230; 3527 PRI Gateway; 3522 BRI Gateway; and 3515 MCU. Root cause is predictable session IDs based on time values, enabling remote attackers to hijack sessions through brute-force. No exploit details are p...

CVE-2010-3038

CVE-2010-3038 affects Cisco Unified Videoconferencing (UVC) Linux-based systems (5110/5115). The vulnerability arises from hard-coded credentials: root, cs, and develop accounts with login shells and passwords that cannot be changed or deleted. It enables remote attackers to obtain access via FTP...

CVE-2010-4303

CVE-2010-4303 affects Cisco Unified Videoconferencing (UVC) System 5110 and 5115 when running Linux. The root cause described in the sources is that /etc/shadow is world-readable, enabling local users to read encrypted password hashes. This is a local disclosure vulnerability as stated. The conne...