PT-2013-5638 · Cisco · Cisco Telepresence Vx Clinical Assistant

Published 2013-11-08 · Updated 2013-11-08 · CVE-2013-5558

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco TelePresence VX Clinical Assistant version 1.2

Description The issue allows remote attackers to obtain access via the administrative interface because the WIL-A module changes the admin password to an empty password upon a reboot.

Recommendations For Cisco TelePresence VX Clinical Assistant version 1.2, update to version 1.21 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2013-5558

Affected Products

Cisco Telepresence Vx Clinical Assistant

References · 2

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131106-tvxca · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-5558 · Security Note