Published: 25/02/2011 Updated: 17/08/2017

CVSS v2 Base Score: 7.8 | Impact Score: 6.9 | Exploitability Score: 10

VMScore: 694

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C

Subscribe to Telepresence Multipoint Switch Software

The XML-RPC implementation on Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, 1.6.x, and 1.7.0 allows remote malicious users to cause a denial of service (process crash) via a crafted request, aka Bug ID CSCtj44534.

Vulnerable Product	Search on Vulmon	Subscribe to Product
cisco telepresence_multipoint_switch_software 1.6.3
cisco telepresence_multipoint_switch_software 1.6.4
cisco telepresence_multipoint_switch_software 1.5.2
cisco telepresence_multipoint_switch_software 1.5.3
cisco telepresence_multipoint_switch_software 1.5.0
cisco telepresence_multipoint_switch_software 1.1.2
cisco telepresence_multipoint_switch_software 1.1.1
cisco telepresence_multipoint_switch_software 1.5.6
cisco telepresence_multipoint_switch_software 1.6.0
cisco telepresence_multipoint_switch_software 1.1.0
cisco telepresence_multipoint_switch_software 1.0.4.0
cisco telepresence_multipoint_switch_software 1.5.4
cisco telepresence_multipoint_switch_software 1.5.5
cisco telepresence_multipoint_switch_software 1.5.1
cisco telepresence_multipoint_switch_software 1.6.1
cisco telepresence_multipoint_switch_software 1.6.2
cisco telepresence_multipoint_switch_software 1.7.0
cisco telepresence_multipoint_switch

Multiple vulnerabilities exist in the Cisco TelePresence Manager This security advisory outlines the details of the following vulnerabilities: Simple Object Access Protocol (SOAP) Authentication Bypass Java Remote Method Invocation (RMI) Command Injection Cisco Discovery Protocol Remote Code Execution Duplicat ...

Multiple vulnerabilities exist within the Cisco TelePresence Multipoint Switch This security advisory outlines details of the following vulnerabilities: Unauthenticated Java Servlet Access Unauthenticated Arbitrary File Upload Cisco Discovery Protocol Remote Code Execution Unauthorized Servlet Access Jav ...

CWE-399 http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e14e.shtml http://www.securityfocus.com/bid/46520 http://www.securitytracker.com/id?1025113 https://exchange.xforce.ibmcloud.com/vulnerabilities/65623 https://nvd.nist.gov http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20110223-telepresence-ctsman

CVE-2011-0390

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect