CVE-2011-0374 The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote authenticated users to execute arbitrary commands via a malformed request, related to "com...
HighCVSS 9.0
EPSS 2.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote authenticated users to execute arbitrary commands via a malformed request, related to "command injection vulnerabilities," aka Bug ID CSCtb31659.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco telepresence system software | = 1.2.3 | No fix listed |
| cisco telepresence system software | = 1.3.2 | No fix listed |
| cisco telepresence system software | = 1.4.7 | No fix listed |
| cisco telepresence system software | = 1.5.1 | No fix listed |
| cisco telepresence system software | = 1.5.3 | No fix listed |
| cisco telepresence system software | = 1.5.10 | No fix listed |
| cisco telepresence system software | = 1.5.11 | No fix listed |
| cisco telepresence system software | = 1.5.12 | No fix listed |
| cisco telepresence system software | = 1.5.13 | No fix listed |
| cisco telepresence system 1000 | All versions | No fix listed |
| cisco telepresence system 1100 | All versions | No fix listed |
| cisco telepresence system 3000 | All versions | No fix listed |
| cisco telepresence system 1300 series | All versions | No fix listed |
| cisco telepresence system 3200 series | All versions | No fix listed |
| cisco telepresence system 500 series | All versions | No fix listed |
References
- 20110223 Multiple Vulnerabilities in Cisco TelePresence Endpoint Devices vendor-advisory
- 1025112 vdb-entry