critical10.0
CVE-2011-4659
Cisco TelePresence Software before TE 4.1.1 on the Cisco IP Video Phone E20 has a default password for the root account after an upgrade to TE 4.1.0, which mak…
Impact
Cisco TelePresence Software before TE 4.1.1 on the Cisco IP Video Phone E20 has a default password for the root account after an upgrade to TE 4.1.0, which makes it easier for remote attackers to modify the configuration via an SSH session, aka Bug ID CSCtw69889, a different vulnerability than CVE-2011-2555.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Telepresence E20 Software | through te4.1.1-cucm Versions te2.2, te2.2.1, te4.0.0, te4.1.0, te4.1.1 |
| Cisco | Ip Video Phone E20 | All versions |