high7.8
CVE-2011-0377
Cisco TelePresence endpoint devices with software 1.2.x through 1.6.x allow remote attackers to cause a denial of service (service crash) via a malformed SOAP …
Impact
Cisco TelePresence endpoint devices with software 1.2.x through 1.6.x allow remote attackers to cause a denial of service (service crash) via a malformed SOAP request in conjunction with a spoofed TelePresence Manager that supplies an invalid IP address, aka Bug ID CSCth03605.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Telepresence System Software | Versions 1.2.3, 1.3.2, 1.4.7, 1.5.1, 1.5.3, 1.5.10 |
| Cisco | Telepresence System 1000 | All versions |
| Cisco | Telepresence System 1100 | All versions |
| Cisco | Telepresence System 3000 | All versions |
| Cisco | Telepresence System 1300 Series | All versions |
| Cisco | Telepresence System 3200 Series | All versions |
| Cisco | Telepresence System 500 Series | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e152.shtml
- http://www.securitytracker.com/id?1025112
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65616
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e152.shtml
- http://www.securitytracker.com/id?1025112
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65616