PT-2011-2307 · Cisco · Cisco Telepresence Multipoint Switch+1

Published 2011-02-25 · Updated 2017-08-17 · CVE-2011-0385

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Recording Server versions 1.6.x Cisco TelePresence Multipoint Switch (CTMS) versions 1.0.x through 1.6.x

Description The administrative web interface allows remote attackers to create or overwrite arbitrary files, and possibly execute arbitrary code, via a crafted request.

Recommendations For Cisco TelePresence Recording Server version 1.6.x, update to a version that fixes the issue. For Cisco TelePresence Multipoint Switch (CTMS) versions 1.0.x through 1.6.x, update to a version that fixes the issue.

Fix

Related Identifiers

CVE-2011-0385

Affected Products

Cisco Telepresence Multipoint Switch

Cisco Telepresence Recording Server

References · 6

• http://cisco.com/en/US/products/products_security_advisory09186a0080b6e11d.shtml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-0385 · Security Note
• http://cisco.com/en/US/products/products_security_advisory09186a0080b6e14e.shtml · Vendor Advisory
• http://securitytracker.com/id?1025114 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/65604 · Note
• http://securitytracker.com/id?1025113 · Note