CVEvulnerability
CVE-2011-0376
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-02-25
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-200
Description
The TFTP implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x, 1.6.0, and 1.6.1 allows remote attackers to obtain sensitive information via a GET request, aka Bug ID CSCte43876.
Affected configurations
• cisco telepresence system software 1.2.3
• cisco telepresence system software 1.3.2
• cisco telepresence system software 1.4.7
• cisco telepresence system software 1.5.1
• cisco telepresence system software 1.5.3
• cisco telepresence system software 1.5.10
• cisco telepresence system software 1.5.11
• cisco telepresence system software 1.5.12
• cisco telepresence system software 1.5.13
• cisco telepresence system 1000
• cisco telepresence system 1100
• cisco telepresence system 3000
• cisco telepresence system 1300 series
• cisco telepresence system 3200 series
• cisco telepresence system software 1.6.0
• cisco telepresence system software 1.6.1
• cisco telepresence system 500 series
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e152.shtml Vendor Advisory
- http://www.securitytracker.com/id?1025112 www.securitytracker.com
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e152.shtml Vendor Advisory
- http://www.securitytracker.com/id?1025112 www.securitytracker.com