PT-2011-2294
CVE-2011-0372
·
Published
2011-02-25
·
Updated
2011-03-31
Description by
CVSS 2.0
10
HighMetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Cisco TelePresence endpoint devices versions 1.2.x through 1.5.x
Description
The issue allows remote attackers to execute arbitrary commands via a malformed request, related to command injection vulnerabilities.
Recommendations
For versions 1.2.x through 1.5.x, update to a version that addresses the command injection vulnerability to prevent remote attackers from executing arbitrary commands.
Found an issue in the description? Have something to add? Feel free to write us 👾