PT-2010-4510 · Cisco · Cisco Unified Videoconferencing (Uvc) System

Florent Daigniere · Published 2010-11-22 · Updated 2010-12-10 · CVE-2010-3038

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Unified Videoconferencing (UVC) System versions 5110 and 5115

Description The issue allows remote attackers to obtain access due to default passwords for the root, cs, and develop accounts. This makes it easier for attackers to gain access via the FTP or SSH daemon.

Recommendations For Cisco Unified Videoconferencing (UVC) System versions 5110 and 5115, change the default passwords for the root, cs, and develop accounts to prevent unauthorized access.

Fix

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2010-3038

Affected Products

Cisco Unified Videoconferencing (Uvc) System

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2010-3038 · Security Note
• http://cisco.com/en/US/products/products_security_response09186a0080b56d0d.html · Vendor Advisory
• http://trustmatta.com/advisories/MATTA-2010-001.txt · Note
• http://securitytracker.com/id?1024753 · Note
• http://securityfocus.com/bid/44924 · Note
• http://seclists.org/fulldisclosure/2010/Nov/167 · Note