7.8
CVSSv2

CVE-2011-0377

Published: 25/02/2011 Updated: 17/08/2017
CVSS v2 Base Score: 7.8 | Impact Score: 6.9 | Exploitability Score: 10
VMScore: 694
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C

Vulnerability Summary

Cisco TelePresence endpoint devices with software 1.2.x up to and including 1.6.x allow remote malicious users to cause a denial of service (service crash) via a malformed SOAP request in conjunction with a spoofed TelePresence Manager that supplies an invalid IP address, aka Bug ID CSCth03605.

Vulnerable Product Search on Vulmon Subscribe to Product

cisco telepresence_system_software 1.2.3

cisco telepresence_system_software 1.5.10

cisco telepresence_system_software 1.6.3

cisco telepresence_system_software 1.6.4

cisco telepresence_system_software 1.5.13

cisco telepresence_system_software 1.5.3

cisco telepresence_system_software 1.5.1

cisco telepresence_system_software 1.6.5

cisco telepresence_system_software 1.5.11

cisco telepresence_system_software 1.5.12

cisco telepresence_system_software 1.6.0

cisco telepresence_system_software 1.6.2

cisco telepresence_system_software 1.4.7

cisco telepresence_system_software 1.3.2

cisco telepresence_system_software 1.6.6

cisco telepresence_system_software 1.6.7

cisco telepresence_system_software 1.6.8

cisco telepresence_system_1000

cisco telepresence_system_1100

cisco telepresence_system_3000

cisco telepresence_system_1300_series

cisco telepresence_system_3200_series

cisco telepresence_system_500_series

Vendor Advisories

Multiple vulnerabilities exist in the Cisco TelePresence solution; each component of the solution is addressed independently in its own advisory This advisory addresses Cisco TelePresence endpoint devices and details the following vulnerabilities: Unauthenticated Common Gateway Interface (CGI) Access CGI Command Injection ...