Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveCiscoCVE-2011-0378
HistoryFeb 25, 2011 - 12:00 p.m.

CVE-2011-0378

2011-02-2512:00:18
CWE-78
cisco
web.nvd.nist.gov
32
cisco
telepresence
endpoint devices
xml-rpc
command injection
vulnerability
cisco bug id
csctb52587
nvd
cve-2011-0378

CVSS2

8.3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:C/I:C/A:C

AI Score

8.1

Confidence

Low

EPSS

0.001

Percentile

48.8%

JSON

The XML-RPC implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote attackers to execute arbitrary commands via a TCP request, related to a “command injection vulnerability,” aka Bug ID CSCtb52587.

Affected configurations

Nvd
Node
ciscotelepresence_system_softwareMatch1.2.3
OR
ciscotelepresence_system_softwareMatch1.3.2
OR
ciscotelepresence_system_softwareMatch1.4.7
OR
ciscotelepresence_system_softwareMatch1.5.1
OR
ciscotelepresence_system_softwareMatch1.5.3
OR
ciscotelepresence_system_softwareMatch1.5.10
OR
ciscotelepresence_system_softwareMatch1.5.11
OR
ciscotelepresence_system_softwareMatch1.5.12
OR
ciscotelepresence_system_softwareMatch1.5.13
AND
ciscotelepresence_system_1000
OR
ciscotelepresence_system_1100
Node
ciscotelepresence_system_softwareMatch1.2.3
OR
ciscotelepresence_system_softwareMatch1.3.2
OR
ciscotelepresence_system_softwareMatch1.4.7
OR
ciscotelepresence_system_softwareMatch1.5.1
OR
ciscotelepresence_system_softwareMatch1.5.3
OR
ciscotelepresence_system_softwareMatch1.5.10
OR
ciscotelepresence_system_softwareMatch1.5.11
OR
ciscotelepresence_system_softwareMatch1.5.12
OR
ciscotelepresence_system_softwareMatch1.5.13
AND
ciscotelepresence_system_3000
Node
ciscotelepresence_system_softwareMatch1.5.10
OR
ciscotelepresence_system_softwareMatch1.5.11
OR
ciscotelepresence_system_softwareMatch1.5.12
OR
ciscotelepresence_system_softwareMatch1.5.13
AND
ciscotelepresence_system_1300_series
Node
ciscotelepresence_system_softwareMatch1.4.7
OR
ciscotelepresence_system_softwareMatch1.5.1
OR
ciscotelepresence_system_softwareMatch1.5.3
OR
ciscotelepresence_system_softwareMatch1.5.10
OR
ciscotelepresence_system_softwareMatch1.5.11
OR
ciscotelepresence_system_softwareMatch1.5.12
OR
ciscotelepresence_system_softwareMatch1.5.13
AND
ciscotelepresence_system_3200_series
Node
ciscotelepresence_system_softwareMatch1.4.7
OR
ciscotelepresence_system_softwareMatch1.5.1
OR
ciscotelepresence_system_softwareMatch1.5.3
OR
ciscotelepresence_system_softwareMatch1.5.10
OR
ciscotelepresence_system_softwareMatch1.5.11
OR
ciscotelepresence_system_softwareMatch1.5.12
OR
ciscotelepresence_system_softwareMatch1.5.13
AND
ciscotelepresence_system_500_series
VendorProductVersionCPE
ciscotelepresence_system_software1.2.3cpe:2.3:a:cisco:telepresence_system_software:1.2.3:*:*:*:*:*:*:*
ciscotelepresence_system_software1.3.2cpe:2.3:a:cisco:telepresence_system_software:1.3.2:*:*:*:*:*:*:*
ciscotelepresence_system_software1.4.7cpe:2.3:a:cisco:telepresence_system_software:1.4.7:*:*:*:*:*:*:*
ciscotelepresence_system_software1.5.1cpe:2.3:a:cisco:telepresence_system_software:1.5.1:*:*:*:*:*:*:*
ciscotelepresence_system_software1.5.3cpe:2.3:a:cisco:telepresence_system_software:1.5.3:*:*:*:*:*:*:*
ciscotelepresence_system_software1.5.10cpe:2.3:a:cisco:telepresence_system_software:1.5.10:*:*:*:*:*:*:*
ciscotelepresence_system_software1.5.11cpe:2.3:a:cisco:telepresence_system_software:1.5.11:*:*:*:*:*:*:*
ciscotelepresence_system_software1.5.12cpe:2.3:a:cisco:telepresence_system_software:1.5.12:*:*:*:*:*:*:*
ciscotelepresence_system_software1.5.13cpe:2.3:a:cisco:telepresence_system_software:1.5.13:*:*:*:*:*:*:*
ciscotelepresence_system_1000*cpe:2.3:h:cisco:telepresence_system_1000:*:*:*:*:*:*:*:*
Rows per page:
1-10 of 151

Related

prion 1
cvelist 1
nvd 1
cisco 1
securityvulns 2
prion
prion
Command injection
2011-02-25 12:00:00
cvelist
cvelist
CVE-2011-0378
2011-02-25 11:00:00
nvd
nvd
CVE-2011-0378
2011-02-25 12:00:18
cisco
cisco
Multiple Vulnerabilities in Cisco TelePresence Endpoint Devices
2011-02-23 16:00:00
securityvulns
securityvulns
Cisco Security Advisory: Multiple Vulnerabilities in Cisco TelePresence Endpoint Devices
2011-02-28 00:00:00
Cisco Telepresence multiple security vulnerabilities
2011-02-28 00:00:00

CVSS2

8.3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:C/I:C/A:C

AI Score

8.1

Confidence

Low

EPSS

0.001

Percentile

48.8%

JSON
Related for CVE-2011-0378
prion1cvelist1nvd1cisco1securityvulns2