Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
3.5
CVSSv2

CVE-2011-2544

Published: 23/09/2011 Updated: 09/10/2018
CVSS v2 Base Score: 3.5 | Impact Score: 2.9 | Exploitability Score: 6.8
VMScore: 355
Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N

Vulnerability Summary

Cross-site scripting (XSS) vulnerability in the web interface in Cisco TelePresence System MXP Series F9.1 and previous versions allows remote authenticated users to inject arbitrary web script or HTML via a crafted Call ID, as demonstrated by resultant cross-site request forgery (CSRF) attacks that change passwords or cause a denial of service, aka Bug ID CSCtq46488.

Vulnerable Product Search on Vulmon Subscribe to Product

cisco telepresence_system_1000_mxp

cisco telepresence_system_1700_mxp

cisco telepresence_mxp_software f9.0.1

cisco telepresence_mxp_software f9.0.2

cisco telepresence_mxp_software

cisco telepresence_mxp_software f8.2

cisco telepresence_mxp_software f9.0

Exploits

Exploit DB: Cisco TelePresence SOS-11-010 - Multiple Vulnerabilities
Sense of Security - Security Advisory - SOS-11-010 Release Date 19-Sep-2011 Last Update - Vendor Notification Date 21-Feb-2011 Product Cisco TelePresence Series Platform Cisco Affected versions C <= TC412, MXP <= F91 Severity Rating ...
Exploit DB: Cisco TelePresence Cookie Theft / Impersonation / Code Execution
Sense of Security - Security Advisory - SOS-11-010Release Date 19-Sep-2011Last Update -Vendor Notification Date 21-Feb-2011Product Cisco TelePresence SeriesPlatform CiscoAffected versions C <= TC412, MXP <= F91Severity Rating ...

References

CWE-79http://securitytracker.com/id?1026072http://secunia.com/advisories/46057http://www.exploit-db.com/exploits/17871http://secunia.com/advisories/46109http://www.securityfocus.com/bid/49670http://securityreason.com/securityalert/8393https://exchange.xforce.ibmcloud.com/vulnerabilities/69906http://www.securityfocus.com/archive/1/519698/100/0/threadedhttps://nvd.nist.govhttps://www.exploit-db.com/exploits/17871/
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
authentication bypassCVE-2024-30043cameraCVE-2023-40404CVE-2024-2793client sideCVE-2024-4469CVE-2024-3565CVE-2024-29825
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook