PT-2013-4362 · Cisco · Cisco Telepresence Tc

Publicado 2013-07-10 · Atualizado 2013-10-11 · CVE-2013-3405

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Cisco TelePresence TC software (affected versions not specified)

Description The issue concerns the web portal in Cisco TelePresence endpoints, where it does not enforce an exact password match for users without a configured password. This allows remote attackers to bypass authentication by sending any password.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2013-3405

Produtos afetados

Cisco Telepresence Tc

Referências · 2

• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3405 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2013-3405 · Nota de Segurança