CVE-2011-2763 The web interface on the LifeSize Room appliance LS_RM1_3.5.3 (11) and 4.7.18 allows remote attackers to execute arbitrary commands via a modified request to the LSRoom_Remoting.doCommand function in....
HighCVSS 7.5
EPSS 36.1%
Framework module
- Published
- Updated
- Exploit status
- Public exploit available
Description
The web interface on the LifeSize Room appliance LS_RM1_3.5.3 (11) and 4.7.18 allows remote attackers to execute arbitrary commands via a modified request to the LSRoom_Remoting.doCommand function in gateway.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lifesize room appliance software | = 4.7.18 | No fix listed |
| lifesize room appliance software | = ls_rm1_3.5.3 | No fix listed |
References
- 8363 third-party-advisory
- 8527 third-party-advisory
- 17743 exploit
- VU#213486 third-party-advisory us-government-resource
- www.securestate.com exploit
- 20110828 LifeSize Room Vulnerabilities mailing-list
- 49330 exploit vdb-entry
- lifesize-room-command-execution(69444) vdb-entry