CVE-2011-0376 The TFTP implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x, 1.6.0, and 1.6.1 allows remote attackers to obtain sensitive information via a GET request, aka Bug ID...
HighCVSS 10.0
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The TFTP implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x, 1.6.0, and 1.6.1 allows remote attackers to obtain sensitive information via a GET request, aka Bug ID CSCte43876.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco telepresence system software | = 1.2.3 | No fix listed |
| cisco telepresence system software | = 1.3.2 | No fix listed |
| cisco telepresence system software | = 1.4.7 | No fix listed |
| cisco telepresence system software | = 1.5.1 | No fix listed |
| cisco telepresence system software | = 1.5.3 | No fix listed |
| cisco telepresence system software | = 1.5.10 | No fix listed |
| cisco telepresence system software | = 1.5.11 | No fix listed |
| cisco telepresence system software | = 1.5.12 | No fix listed |
| cisco telepresence system software | = 1.5.13 | No fix listed |
| cisco telepresence system software | = 1.6.0 | No fix listed |
| cisco telepresence system software | = 1.6.1 | No fix listed |
| cisco telepresence system 1000 | All versions | No fix listed |
| cisco telepresence system 1100 | All versions | No fix listed |
| cisco telepresence system 3000 | All versions | No fix listed |
| cisco telepresence system 1300 series | All versions | No fix listed |
| cisco telepresence system 3200 series | All versions | No fix listed |
| cisco telepresence system 500 series | All versions | No fix listed |
References
- 20110223 Multiple Vulnerabilities in Cisco TelePresence Endpoint Devices vendor-advisory
- 1025112 vdb-entry