PT-2011-2307 · Cisco · Cisco Telepresence Multipoint Switch+1

Publicado 2011-02-25 · Atualizado 2017-08-17 · CVE-2011-0385

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Recording Server versions 1.6.x Cisco TelePresence Multipoint Switch (CTMS) versions 1.0.x through 1.6.x

Description The administrative web interface allows remote attackers to create or overwrite arbitrary files, and possibly execute arbitrary code, via a crafted request.

Recommendations For Cisco TelePresence Recording Server version 1.6.x, update to a version that fixes the issue. For Cisco TelePresence Multipoint Switch (CTMS) versions 1.0.x through 1.6.x, update to a version that fixes the issue.

Correção

Identificadores relacionados

CVE-2011-0385

Produtos afetados

Cisco Telepresence Multipoint Switch

Cisco Telepresence Recording Server

Referências · 6

• http://cisco.com/en/US/products/products_security_advisory09186a0080b6e11d.shtml · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2011-0385 · Nota de Segurança
• http://cisco.com/en/US/products/products_security_advisory09186a0080b6e14e.shtml · Aviso do Fabricante
• http://securitytracker.com/id?1025114 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/65604 · Nota
• http://securitytracker.com/id?1025113 · Nota