PT-2011-2309 · Cisco · Cisco Telepresence Multipoint Switch

Published 2011-02-25 · Updated 2017-08-17 · CVE-2011-0387

Positive Technologies (AI Summary)

CVSS v2.0

8.0

High

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:C

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Multipoint Switch (CTMS) versions 1.0.x through 1.6.x

Description The administrative web interface on CTMS devices allows remote authenticated users to cause a denial of service or have unspecified other impact via vectors involving access to a servlet.

Recommendations For CTMS versions 1.0.x through 1.6.x, consider restricting access to the administrative web interface as a temporary workaround until a patch is available.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2011-0387

Affected Products

Cisco Telepresence Multipoint Switch

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2011-0387 · Security Note
• http://cisco.com/en/US/products/products_security_advisory09186a0080b6e14e.shtml · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/65621 · Note
• http://securitytracker.com/id?1025113 · Note
• http://securityfocus.com/bid/46520 · Note