high7.5
CVE-2011-0392
Cisco TelePresence Recording Server devices with software 1.6.x do not require authentication for an XML-RPC interface, which allows remote attackers to perfor…
Impact
Cisco TelePresence Recording Server devices with software 1.6.x do not require authentication for an XML-RPC interface, which allows remote attackers to perform unspecified actions via a session on TCP port 8080, aka Bug ID CSCtg35833.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Telepresence Recording Server Software | Versions 1.6.1, 1.6.2, 1.6.3 |
| Cisco | Telepresence Recording Server | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e11d.shtml
- http://www.securityfocus.com/bid/46522
- http://www.securitytracker.com/id?1025114
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65609
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e11d.shtml
- http://www.securityfocus.com/bid/46522
- http://www.securitytracker.com/id?1025114
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65609