CVE-2011-2763

2011-09-0216:55:04

CWE-20

[email protected]

web.nvd.nist.gov

lifesize

room

appliance

web interface

remote code execution

vulnerability

cve-2011-2763

nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.5 High

AI Score

Confidence

Low

0.436 Medium

EPSS

Percentile

97.4%

JSON

The web interface on the LifeSize Room appliance LS_RM1_3.5.3 (11) and 4.7.18 allows remote attackers to execute arbitrary commands via a modified request to the LSRoom_Remoting.doCommand function in gateway.php.

Affected configurations

NVD

Node

lifesizelifesize_room_appliance

AND

lifesizelifesize_room_appliance_softwareMatch4.7.18

lifesizelifesize_room_appliance_softwareMatchls_rm1_3.5.3

CPENameOperatorVersion
lifesize:lifesize_room_appliance_softwarelifesize lifesize room appliance softwareeq4.7.18
lifesize:lifesize_room_appliance_softwarelifesize lifesize room appliance softwareeqls_rm1_3.5.3

CPE	Name	Operator	Version
lifesize:lifesize_room_appliance_software	lifesize lifesize room appliance software	eq	4.7.18
lifesize:lifesize_room_appliance_software	lifesize lifesize room appliance software	eq	ls_rm1_3.5.3