critical9.0
CVE-2011-0375
The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.6.x allows remote authenticated users to execute arbitrary commands…
Impact
The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.6.x allows remote authenticated users to execute arbitrary commands via a malformed request, related to "command injection vulnerabilities," aka Bug ID CSCth24671.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Telepresence System Software | Versions 1.2.3, 1.3.2, 1.4.7, 1.5.1, 1.5.3, 1.5.10 |
| Cisco | Telepresence System 1000 | All versions |
| Cisco | Telepresence System 1100 | All versions |
| Cisco | Telepresence System 3000 | All versions |
| Cisco | Telepresence System 1300 Series | All versions |
| Cisco | Telepresence System 3200 Series | All versions |
| Cisco | Telepresence System 500 Series | All versions |