CVE-2011-2762 The web interface on the LifeSize Room appliance LS_RM1_3.5.3 (11) allows remote attackers to bypass authentication via unspecified data associated with a "true" authentication status, related to AMF....
MediumCVSS 5.0
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The web interface on the LifeSize Room appliance LS_RM1_3.5.3 (11) allows remote attackers to bypass authentication via unspecified data associated with a "true" authentication status, related to AMF data and the LSRoom_Remoting.authenticate function in gateway.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lifesize room appliance software | = ls_rm1_3.5.3 | No fix listed |
References
- 8364 third-party-advisory
- VU#213486 third-party-advisory us-government-resource
- www.securestate.com exploit
- 20110828 LifeSize Room Vulnerabilities mailing-list
- 49330 exploit vdb-entry
- lifesize-room-security-bypass(69445) vdb-entry