Lucene search

[email protected]CVE-2013-3454

HistoryOct 03, 2022 - 4:14 p.m.

CVE-2013-3454

2022-10-0316:14:45

CWE-255

[email protected]

web.nvd.nist.gov

cisco

telepresence

software

default password

pwrecovery account

remote attackers

https requests

bug id cscui43128

nvd

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.2 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

69.0%

JSON

Cisco TelePresence System Software 1.10.1 and earlier on 500, 13X0, 1X00, 30X0, and 3X00 devices, and 6.0.3 and earlier on TX 9X00 devices, has a default password for the pwrecovery account, which makes it easier for remote attackers to modify the configuration or perform arbitrary actions via HTTPS requests, aka Bug ID CSCui43128.

Affected configurations

NVD

Node

ciscotelepresence_system_tx9000

ciscotelepresence_system_tx9200

AND

ciscotelepresence_system_softwareRange≤6.0.3\(33\)

ciscotelepresence_system_softwareMatch1.9.0\(46\)

ciscotelepresence_system_softwareMatch1.9.0.1\(3\)

ciscotelepresence_system_softwareMatch1.9.1\(68\)

ciscotelepresence_system_softwareMatch1.9.2

ciscotelepresence_system_softwareMatch1.9.2\(19\)

ciscotelepresence_system_softwareMatch1.9.3

ciscotelepresence_system_softwareMatch1.9.3\(44\)

ciscotelepresence_system_softwareMatch1.9.4

ciscotelepresence_system_softwareMatch1.9.4\(19\)

ciscotelepresence_system_softwareMatch1.9.5

ciscotelepresence_system_softwareMatch1.9.5\(7\)

ciscotelepresence_system_softwareMatch1.9.6

ciscotelepresence_system_softwareMatch1.9.6\(2\)

ciscotelepresence_system_softwareMatch6.0.0.1\(4\)

ciscotelepresence_system_softwareMatch6.0.1\(50\)

ciscotelepresence_system_softwareMatch6.0.2\(28\)

Node

ciscotelepresence_system_softwareRange≤1.10.1

ciscotelepresence_system_softwareMatch1.2.3

ciscotelepresence_system_softwareMatch1.2.3\(1101\)

ciscotelepresence_system_softwareMatch1.3.2

ciscotelepresence_system_softwareMatch1.3.2\(1393\)

ciscotelepresence_system_softwareMatch1.4.7

ciscotelepresence_system_softwareMatch1.4.7\(2229\)

ciscotelepresence_system_softwareMatch1.5.1

ciscotelepresence_system_softwareMatch1.5.1\(2082\)

ciscotelepresence_system_softwareMatch1.5.3

ciscotelepresence_system_softwareMatch1.5.3\(2115\)

ciscotelepresence_system_softwareMatch1.5.10

ciscotelepresence_system_softwareMatch1.5.10\(3648\)

ciscotelepresence_system_softwareMatch1.5.11

ciscotelepresence_system_softwareMatch1.5.11\(3659\)

ciscotelepresence_system_softwareMatch1.5.12

ciscotelepresence_system_softwareMatch1.5.12\(3701\)

ciscotelepresence_system_softwareMatch1.5.13

ciscotelepresence_system_softwareMatch1.5.13\(3717\)

ciscotelepresence_system_softwareMatch1.6.0

ciscotelepresence_system_softwareMatch1.6.0\(3954\)

ciscotelepresence_system_softwareMatch1.6.1

ciscotelepresence_system_softwareMatch1.6.2

ciscotelepresence_system_softwareMatch1.6.2\(4023\)

ciscotelepresence_system_softwareMatch1.6.3

ciscotelepresence_system_softwareMatch1.6.3\(4042\)

ciscotelepresence_system_softwareMatch1.6.4

ciscotelepresence_system_softwareMatch1.6.4\(4072\)

ciscotelepresence_system_softwareMatch1.6.5

ciscotelepresence_system_softwareMatch1.6.5\(4097\)

ciscotelepresence_system_softwareMatch1.6.6

ciscotelepresence_system_softwareMatch1.6.6\(4109\)

ciscotelepresence_system_softwareMatch1.6.7

ciscotelepresence_system_softwareMatch1.6.7\(4212\)

ciscotelepresence_system_softwareMatch1.6.8

ciscotelepresence_system_softwareMatch1.6.8\(4222\)

ciscotelepresence_system_softwareMatch1.7.0.1\(4764\)

ciscotelepresence_system_softwareMatch1.7.0.2\(4719\)

ciscotelepresence_system_softwareMatch1.7.1\(4864\)

ciscotelepresence_system_softwareMatch1.7.2\(4937\)

ciscotelepresence_system_softwareMatch1.7.2.1\(2\)

ciscotelepresence_system_softwareMatch1.7.4\(270\)

ciscotelepresence_system_softwareMatch1.7.5\(42\)

ciscotelepresence_system_softwareMatch1.7.6\(4\)

ciscotelepresence_system_softwareMatch1.8.0\(55\)

ciscotelepresence_system_softwareMatch1.8.1\(34\)

ciscotelepresence_system_softwareMatch1.8.2\(11\)

ciscotelepresence_system_softwareMatch1.8.3\(4\)

ciscotelepresence_system_softwareMatch1.9.0\(46\)

ciscotelepresence_system_softwareMatch1.9.0.1\(3\)

ciscotelepresence_system_softwareMatch1.9.1\(68\)

ciscotelepresence_system_softwareMatch1.9.2

ciscotelepresence_system_softwareMatch1.9.3

ciscotelepresence_system_softwareMatch1.9.4

ciscotelepresence_system_softwareMatch1.9.5

ciscotelepresence_system_softwareMatch1.9.6

ciscotelepresence_system_softwareMatch1.10.0

AND

ciscotelepresence_system_1300Match-

ciscotelepresence_system_1300-65Match-

ciscotelepresence_system_3000

ciscotelepresence_system_3010

ciscotelepresence_system_3200

ciscotelepresence_system_3210

ciscotelepresence_system_500-32Match-

ciscotelepresence_system_500-37Match-

CPENameOperatorVersion
cisco:telepresence_system_tx9000cisco telepresence system tx9000eq*
cisco:telepresence_system_tx9200cisco telepresence system tx9200eq*
cisco:telepresence_system_softwarecisco telepresence system softwareeq1.9.0\(46\)
cisco:telepresence_system_softwarecisco telepresence system softwareeq1.9.0.1\(3\)
cisco:telepresence_system_softwarecisco telepresence system softwareeq1.9.1\(68\)
cisco:telepresence_system_softwarecisco telepresence system softwareeq1.9.2
cisco:telepresence_system_softwarecisco telepresence system softwareeq1.9.3
cisco:telepresence_system_softwarecisco telepresence system softwareeq1.9.4
cisco:telepresence_system_softwarecisco telepresence system softwareeq1.9.5
cisco:telepresence_system_softwarecisco telepresence system softwareeq1.9.6

CPE	Name	Operator	Version
cisco:telepresence_system_tx9000	cisco telepresence system tx9000	eq	*
cisco:telepresence_system_tx9200	cisco telepresence system tx9200	eq	*
cisco:telepresence_system_software	cisco telepresence system software	eq	1.9.0\(46\)
cisco:telepresence_system_software	cisco telepresence system software	eq	1.9.0.1\(3\)
cisco:telepresence_system_software	cisco telepresence system software	eq	1.9.1\(68\)
cisco:telepresence_system_software	cisco telepresence system software	eq	1.9.2
cisco:telepresence_system_software	cisco telepresence system software	eq	1.9.3
cisco:telepresence_system_software	cisco telepresence system software	eq	1.9.4
cisco:telepresence_system_software	cisco telepresence system software	eq	1.9.5
cisco:telepresence_system_software	cisco telepresence system software	eq	1.9.6