CVEvulnerability
CVE-2011-4659
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2012-01-19
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
Cisco TelePresence Software before TE 4.1.1 on the Cisco IP Video Phone E20 has a default password for the root account after an upgrade to TE 4.1.0, which makes it easier for remote attackers to modify the configuration via an SSH session, aka Bug ID CSCtw69889, a different vulnerability than CVE-2011-2555.
Affected configurations
• cisco telepresence e20 software (<= te4.1.1-cucm)
• cisco telepresence e20 software te2.2
• cisco telepresence e20 software te2.2.1
• cisco telepresence e20 software te4.0.0
• cisco telepresence e20 software te4.1.0
• cisco telepresence e20 software te4.1.1
• cisco telepresence e20 software tenc4.0.0
• cisco telepresence e20 software tenc4.1.0
• cisco telepresence e20 software tenc4.1.1
• cisco telepresence e20 software tenc4.1.1-cucm
• cisco ip video phone e20