CVEvulnerability

CVE-2011-0374

9.0 HIGH Published 2011-02-25 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2011-02-25
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.0 HIGH — AV:N/AC:L/Au:S/C:C/I:C/A:C
Weaknesses
CWE-78

Description

The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote authenticated users to execute arbitrary commands via a malformed request, related to "command injection vulnerabilities," aka Bug ID CSCtb31659.

Affected configurations

• cisco telepresence system software 1.2.3 • cisco telepresence system software 1.3.2 • cisco telepresence system software 1.4.7 • cisco telepresence system software 1.5.1 • cisco telepresence system software 1.5.3 • cisco telepresence system software 1.5.10 • cisco telepresence system software 1.5.11 • cisco telepresence system software 1.5.12 • cisco telepresence system software 1.5.13 • cisco telepresence system 1000 • cisco telepresence system 1100 • cisco telepresence system 3000 • cisco telepresence system 1300 series • cisco telepresence system 3200 series • cisco telepresence system 500 series

Related

Weakness · CWE (1)

  • CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness

References