CVE-2011-4659 Cisco TelePresence Software before TE 4.1.1 on the Cisco IP Video Phone E20 has a default password for the root account after an upgrade to TE 4.1.0, which makes it easier for remote attackers to modi...
HighCVSS 10.0
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cisco TelePresence Software before TE 4.1.1 on the Cisco IP Video Phone E20 has a default password for the root account after an upgrade to TE 4.1.0, which makes it easier for remote attackers to modify the configuration via an SSH session, aka Bug ID CSCtw69889, a different vulnerability than CVE-2011-2555.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco telepresence e20 software | <= te4.1.1-cucm | No fix listed |
| cisco telepresence e20 software | = te2.2 | No fix listed |
| cisco telepresence e20 software | = te2.2.1 | No fix listed |
| cisco telepresence e20 software | = te4.0.0 | No fix listed |
| cisco telepresence e20 software | = te4.1.0 | No fix listed |
| cisco telepresence e20 software | = te4.1.1 | No fix listed |
| cisco telepresence e20 software | = tenc4.0.0 | No fix listed |
| cisco telepresence e20 software | = tenc4.1.0 | No fix listed |
| cisco telepresence e20 software | = tenc4.1.1 | No fix listed |
| cisco telepresence e20 software | = tenc4.1.1-cucm | No fix listed |
| cisco ip video phone e20 | All versions | No fix listed |
References
- 20120118 Cisco IP Video Phone E20 Default Root Account vendor-advisory