Lucene search

K
cveCiscoCVE-2011-0382
HistoryFeb 25, 2011 - 12:00 p.m.

CVE-2011-0382

2011-02-2512:00:18
CWE-78
cisco
web.nvd.nist.gov
23
cisco
telepresence
recording server
cgi
command injection
vulnerability
cisco telepresence recording server
cve-2011-0382
nvd

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

8.1

Confidence

Low

EPSS

0.003

Percentile

68.7%

The CGI subsystem on Cisco TelePresence Recording Server devices with software 1.6.x before 1.6.2 allows remote attackers to execute arbitrary commands via a request to TCP port 443, related to a “command injection vulnerability,” aka Bug ID CSCtf97221.

Affected configurations

Nvd
Node
ciscotelepresence_recording_server_softwareMatch1.6.1
AND
ciscotelepresence_recording_server
VendorProductVersionCPE
ciscotelepresence_recording_server_software1.6.1cpe:2.3:a:cisco:telepresence_recording_server_software:1.6.1:*:*:*:*:*:*:*
ciscotelepresence_recording_server*cpe:2.3:h:cisco:telepresence_recording_server:*:*:*:*:*:*:*:*

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

8.1

Confidence

Low

EPSS

0.003

Percentile

68.7%