CVEvulnerability

CVE-2011-0378

8.3 HIGH Published 2011-02-25 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2011-02-25
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
8.3 HIGH — AV:A/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-78

Description

The XML-RPC implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote attackers to execute arbitrary commands via a TCP request, related to a "command injection vulnerability," aka Bug ID CSCtb52587.

Affected configurations

• cisco telepresence system software 1.2.3 • cisco telepresence system software 1.3.2 • cisco telepresence system software 1.4.7 • cisco telepresence system software 1.5.1 • cisco telepresence system software 1.5.3 • cisco telepresence system software 1.5.10 • cisco telepresence system software 1.5.11 • cisco telepresence system software 1.5.12 • cisco telepresence system software 1.5.13 • cisco telepresence system 1000 • cisco telepresence system 1100 • cisco telepresence system 3000 • cisco telepresence system 1300 series • cisco telepresence system 3200 series • cisco telepresence system 500 series

Related

Weakness · CWE (1)

  • CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness

References