medium4.3
CVE-2013-3405
The web portal in TC software on Cisco TelePresence endpoints does not require an exact password match during a login attempt by a user who has not configured …
Impact
The web portal in TC software on Cisco TelePresence endpoints does not require an exact password match during a login attempt by a user who has not configured a password, which allows remote attackers to bypass authentication by sending an arbitrary password, aka Bug ID CSCud96071.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Telepresence Tc Software | All versions |