CVE-2013-3405

2013-07-1020:00:00

cisco

www.cve.org

web portal

cisco telepresence

remote attackers

authentication

cve-2013-3405

AI Score

7.2

Confidence

Low

EPSS

0.001

Percentile

45.4%

JSON

The web portal in TC software on Cisco TelePresence endpoints does not require an exact password match during a login attempt by a user who has not configured a password, which allows remote attackers to bypass authentication by sending an arbitrary password, aka Bug ID CSCud96071.

References

tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3405