CVEvulnerability
CVE-2010-3038
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-11-22
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-255
Description
Cisco Unified Videoconferencing (UVC) System 5110 and 5115, when the Linux operating system is used, has a default password for the (1) root, (2) cs, and (3) develop accounts, which makes it easier for remote attackers to obtain access via the (a) FTP or (b) SSH daemon, aka Bug ID CSCti54008.
Affected configurations
• cisco unified videoconferencing system 5110 firmware 7.0.1.13.3
• cisco unified videoconferencing system 5115 firmware 7.0.1.13.3
• cisco unified videoconferencing system 5110
• cisco unified videoconferencing system 5115
Related
Weakness · not in database (1)
References
- http://seclists.org/fulldisclosure/2010/Nov/167 seclists.org
- http://www.cisco.com/en/US/products/products_security_response09186a0080b56d0d.html Vendor Advisory
- http://www.securityfocus.com/bid/44924 www.securityfocus.com
- http://www.securitytracker.com/id?1024753 www.securitytracker.com
- http://www.trustmatta.com/advisories/MATTA-2010-001.txt www.trustmatta.com
- http://seclists.org/fulldisclosure/2010/Nov/167 seclists.org
- http://www.cisco.com/en/US/products/products_security_response09186a0080b56d0d.html Vendor Advisory
- http://www.securityfocus.com/bid/44924 www.securityfocus.com
- http://www.securitytracker.com/id?1024753 www.securitytracker.com
- http://www.trustmatta.com/advisories/MATTA-2010-001.txt www.trustmatta.com