CVE-2012-3076

2012-07-1210:34:42

CWE-78

cisco

web.nvd.nist.gov

cisco

telepresence

recording server

remote execution

arbitrary commands

cve-2012-3076

nvd

cscth85804

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

AI Score

7.5

Confidence

Low

EPSS

0.008

Percentile

81.3%

JSON

The administrative web interface on Cisco TelePresence Recording Server before 1.8.0 allows remote authenticated users to execute arbitrary commands via unspecified vectors, aka Bug ID CSCth85804.

Affected configurations

Nvd

Node

ciscotelepresence_recording_serverRange≤1.7.3\(3\)

ciscotelepresence_recording_serverMatch1.6.1\(2\)

ciscotelepresence_recording_serverMatch1.6.2\(31\)

ciscotelepresence_recording_serverMatch1.6.3\(4\)

ciscotelepresence_recording_serverMatch1.7.0\(190\)

ciscotelepresence_recording_serverMatch1.7.1\(22\)

ciscotelepresence_recording_serverMatch1.7.2.1

VendorProductVersionCPE
ciscotelepresence_recording_server*cpe:2.3:a:cisco:telepresence_recording_server:*:*:*:*:*:*:*:*
ciscotelepresence_recording_server1.6.1(2)cpe:2.3:a:cisco:telepresence_recording_server:1.6.1\(2\):*:*:*:*:*:*:*
ciscotelepresence_recording_server1.6.2(31)cpe:2.3:a:cisco:telepresence_recording_server:1.6.2\(31\):*:*:*:*:*:*:*
ciscotelepresence_recording_server1.6.3(4)cpe:2.3:a:cisco:telepresence_recording_server:1.6.3\(4\):*:*:*:*:*:*:*
ciscotelepresence_recording_server1.7.0(190)cpe:2.3:a:cisco:telepresence_recording_server:1.7.0\(190\):*:*:*:*:*:*:*
ciscotelepresence_recording_server1.7.1(22)cpe:2.3:a:cisco:telepresence_recording_server:1.7.1\(22\):*:*:*:*:*:*:*
ciscotelepresence_recording_server1.7.2.1cpe:2.3:a:cisco:telepresence_recording_server:1.7.2.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	telepresence_recording_server	*	cpe:2.3:a:cisco:telepresence_recording_server::::::::
cisco	telepresence_recording_server	1.6.1(2)	cpe:2.3:a:cisco:telepresence_recording_server:1.6.1\(2\):::::::*
cisco	telepresence_recording_server	1.6.2(31)	cpe:2.3:a:cisco:telepresence_recording_server:1.6.2\(31\):::::::*
cisco	telepresence_recording_server	1.6.3(4)	cpe:2.3:a:cisco:telepresence_recording_server:1.6.3\(4\):::::::*
cisco	telepresence_recording_server	1.7.0(190)	cpe:2.3:a:cisco:telepresence_recording_server:1.7.0\(190\):::::::*
cisco	telepresence_recording_server	1.7.1(22)	cpe:2.3:a:cisco:telepresence_recording_server:1.7.1\(22\):::::::*
cisco	telepresence_recording_server	1.7.2.1	cpe:2.3:a:cisco:telepresence_recording_server:1.7.2.1:::::::*