Unscored severity · published Feb 25, 2011
CVE-2011-0392
Cisco TelePresence Recording Server devices with software 1.6.x do not require authentication for an XML-RPC interface, which allows remote attackers to perform unspecified…
–
CVSS
2.4%
EPSS
No
On KEV
Description
Cisco TelePresence Recording Server devices with software 1.6.x do not require authentication for an XML-RPC interface, which allows remote attackers to perform unspecified actions via a session on TCP port 8080, aka Bug ID CSCtg35833.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.4% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TR
Telepresence Recording Server · Cisco
All versions, or not specified · source: NVD
TR
Telepresence Recording Server Software · Cisco
1.6.1; 1.6.2; 1.6.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-0392
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-0392
Vendor Advisory
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e11d.shtml
www.securityfocus.com
http://www.securityfocus.com/bid/46522
www.securitytracker.com
http://www.securitytracker.com/id?1025114
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/65609
More from Telepresence Recording Server
–
CVE-2012-3076
The administrative web interface on Cisco TelePresence Recording Server before 1.8.0 allows remote authenticated users to execute arbitrary commands via unspecified vectors, aka…
–
CVE-2012-3073
The IP implementation on Cisco TelePresence Multipoint Switch before 1.8.1, Cisco TelePresence Manager before 1.9.0, and Cisco TelePresence Recording Server 1.8 and earlier allows…
–
CVE-2012-2486
The Cisco Discovery Protocol (CDP) implementation on Cisco TelePresence Multipoint Switch before 1.9.0, Cisco TelePresence Immersive Endpoint Devices before 1.9.1, Cisco…
–
CVE-2011-0386
The XML-RPC implementation on Cisco TelePresence Recording Server devices with software 1.6.x and 1.7.x before 1.7.1 allows remote attackers to overwrite files and consequently…
–
CVE-2011-0388
Cisco TelePresence Recording Server devices with software 1.6.x and Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x do not…