CVE-2011-2762

The LifeSize Room appliance LS_RM1_3.5.3 (11) web interface is affected by an authentication bypass vulnerability in gateway.php via LSRoom_Remoting.authenticate that lets an unauthenticated attacker gain admin access by tampering AMF data. A separate issue allows unauthenticated command executio...

CVE-2011-2763

The CVE concerns LifeSize Room appliances LS_RM1_3.5.3 (11) and 4.7.18 where the web interface exposes LSRoom_Remoting.doCommand in gateway.php. A remote attacker can craft a request to that endpoint to execute arbitrary OS commands, enabling remote code execution on affected devices. Public reco...