PT-2011-2291 · Cisco · Cisco Tandberg E/Ex Personal Video Units+1

Jared Allar · Published 2011-02-03 · Updated 2011-09-22 · CVE-2011-0354

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Tandberg C Series Endpoints versions prior to TC4.0.0 Cisco Tandberg E and EX Personal Video units versions prior to TC4.0.0

Description The issue concerns a default configuration that sets a blank password for the root account, making it easier for remote attackers to gain access.

Recommendations For Cisco Tandberg C Series Endpoints versions prior to TC4.0.0, update to version TC4.0.0 or later to fix the issue. For Cisco Tandberg E and EX Personal Video units versions prior to TC4.0.0, update to version TC4.0.0 or later to fix the issue.

Exploit

Fix

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2011-0354

Affected Products

Cisco Tandberg C Series Endpoints

Cisco Tandberg E/Ex Personal Video Units

References · 10

• 🔥 https://exploit-db.com/exploits/16100 · Exploit
• 🔥 http://exploit-db.com/exploits/16100 · Exploit
• http://cisco.com/en/US/products/ps11422/products_security_advisory09186a0080b69541.shtml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-0354 · Security Note
• http://secunia.com/advisories/43158 · Vendor Advisory
• http://tools.cisco.com/security/center/viewAlert.x?alertId=22314 · Note
• http://securitytracker.com/id?1025017 · Note
• http://securityreason.com/securityalert/8060 · Note
• http://securityfocus.com/bid/46107 · Note
• http://kb.cert.org/vuls/id/436854 · Note