PT-2011-2291 · Cisco · Cisco Tandberg E/Ex Personal Video Units+1

Jared Allar · Publicado 2011-02-03 · Atualizado 2011-09-22 · CVE-2011-0354

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Tandberg C Series Endpoints versions prior to TC4.0.0 Cisco Tandberg E and EX Personal Video units versions prior to TC4.0.0

Description The issue concerns a default configuration that sets a blank password for the root account, making it easier for remote attackers to gain access.

Recommendations For Cisco Tandberg C Series Endpoints versions prior to TC4.0.0, update to version TC4.0.0 or later to fix the issue. For Cisco Tandberg E and EX Personal Video units versions prior to TC4.0.0, update to version TC4.0.0 or later to fix the issue.

Exploit

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2011-0354

Produtos afetados

Cisco Tandberg C Series Endpoints

Cisco Tandberg E/Ex Personal Video Units

Referências · 10

• 🔥 https://exploit-db.com/exploits/16100 · Exploit
• 🔥 http://exploit-db.com/exploits/16100 · Exploit
• http://cisco.com/en/US/products/ps11422/products_security_advisory09186a0080b69541.shtml · Aviso do Fabricante
• http://tools.cisco.com/security/center/viewAlert.x?alertId=22314 · Nota
• http://securitytracker.com/id?1025017 · Nota
• http://securityreason.com/securityalert/8060 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-0354 · Nota de Segurança
• http://securityfocus.com/bid/46107 · Nota
• http://secunia.com/advisories/43158 · Aviso do Fabricante
• http://kb.cert.org/vuls/id/436854 · Nota