CVEvulnerability

CVE-2011-0383

10.0 HIGH Published 2011-02-25 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2011-02-25
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-287

Description

The Java Servlet framework on Cisco TelePresence Recording Server devices with software 1.6.x before 1.6.2 and Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x does not require administrative authentication for unspecified actions, which allows remote attackers to execute arbitrary code via a crafted request, aka Bug IDs CSCtf42005 and CSCtf42008.

Affected configurations

• cisco telepresence recording server software 1.6.1 • cisco telepresence recording server • cisco telepresence multipoint switch software 1.0.4.0 • cisco telepresence multipoint switch software 1.1.0 • cisco telepresence multipoint switch software 1.1.1 • cisco telepresence multipoint switch software 1.1.2 • cisco telepresence multipoint switch software 1.5.0 • cisco telepresence multipoint switch software 1.5.1 • cisco telepresence multipoint switch software 1.5.2 • cisco telepresence multipoint switch software 1.5.3 • cisco telepresence multipoint switch software 1.5.4 • cisco telepresence multipoint switch software 1.5.5 • cisco telepresence multipoint switch software 1.5.6 • cisco telepresence multipoint switch software 1.6.0 • cisco telepresence multipoint switch software 1.6.1 • cisco telepresence multipoint switch software 1.6.2 • cisco telepresence multipoint switch software 1.6.3 • cisco telepresence multipoint switch software 1.6.4 • cisco telepresence multipoint switch

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References