CVEvulnerability

CVE-2011-0384

10.0 HIGH Published 2011-02-25 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2011-02-25
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-287

Description

The Java Servlet framework on Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x does not require administrative authentication for unspecified actions, which allows remote attackers to execute arbitrary code via a crafted request, aka Bug ID CSCtf01253.

Affected configurations

• cisco telepresence multipoint switch software 1.0.4.0 • cisco telepresence multipoint switch software 1.1.0 • cisco telepresence multipoint switch software 1.1.1 • cisco telepresence multipoint switch software 1.1.2 • cisco telepresence multipoint switch software 1.5.0 • cisco telepresence multipoint switch software 1.5.1 • cisco telepresence multipoint switch software 1.5.2 • cisco telepresence multipoint switch software 1.5.3 • cisco telepresence multipoint switch software 1.5.4 • cisco telepresence multipoint switch software 1.5.5 • cisco telepresence multipoint switch software 1.5.6 • cisco telepresence multipoint switch software 1.6.0 • cisco telepresence multipoint switch software 1.6.1 • cisco telepresence multipoint switch software 1.6.2 • cisco telepresence multipoint switch software 1.6.3 • cisco telepresence multipoint switch software 1.6.4 • cisco telepresence multipoint switch

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References