Unscored severity · published Feb 25, 2011
CVE-2011-0385
The administrative web interface on Cisco TelePresence Recording Server devices with software 1.6.x and Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x,…
–
CVSS
5.2%
EPSS
No
On KEV
Description
The administrative web interface on Cisco TelePresence Recording Server devices with software 1.6.x and Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x allows remote attackers to create or overwrite arbitrary files, and possibly execute arbitrary code, via a crafted request, aka Bug IDs CSCth85786 and CSCth61065.
Exploitation
Is it being used?
Exploit prediction (EPSS)5.2% · higher than 92% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TM
Telepresence Multipoint Switch · Cisco
All versions, or not specified · source: NVD
TM
Telepresence Multipoint Switch Software · Cisco
1.0.4.0; 1.1.0; 1.1.1; 1.1.2; 1.5.0; 1.5.1; +10 more · source: NVD
TR
Telepresence Recording Server · Cisco
All versions, or not specified · source: NVD
TR
Telepresence Recording Server Software · Cisco
1.6.1; 1.6.2; 1.6.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-0385
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-0385
Vendor Advisory
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e11d.shtml
Vendor Advisory
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e14e.shtml
www.securitytracker.com
http://www.securitytracker.com/id?1025113
www.securitytracker.com
http://www.securitytracker.com/id?1025114
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/65604
More from Telepresence Multipoint Switch
–
CVE-2013-5516
The Media Snapshot implementation on Cisco TelePresence Multipoint Switch (CTMS) devices allows remote authenticated users to cause a denial of service (device reload) by sending…
–
CVE-2012-3073
The IP implementation on Cisco TelePresence Multipoint Switch before 1.8.1, Cisco TelePresence Manager before 1.9.0, and Cisco TelePresence Recording Server 1.8 and earlier allows…
–
CVE-2012-2486
The Cisco Discovery Protocol (CDP) implementation on Cisco TelePresence Multipoint Switch before 1.9.0, Cisco TelePresence Immersive Endpoint Devices before 1.9.1, Cisco…
–
CVE-2011-0387
The administrative web interface on Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x allows remote authenticated users to cause a…
–
CVE-2011-0379
Buffer overflow on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 1.6.x; Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x,…