PT-2011-2307

CVE-2011-0385

·

Published

2011-02-25

·

Updated

2017-08-17

Description by

CVSS 2.0
10
High
MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Cisco TelePresence Recording Server versions 1.6.x Cisco TelePresence Multipoint Switch (CTMS) versions 1.0.x through 1.6.x
Description The administrative web interface allows remote attackers to create or overwrite arbitrary files, and possibly execute arbitrary code, via a crafted request.
Recommendations For Cisco TelePresence Recording Server version 1.6.x, update to a version that fixes the issue. For Cisco TelePresence Multipoint Switch (CTMS) versions 1.0.x through 1.6.x, update to a version that fixes the issue.
Exploitability
Fix
Vendors
Affected products
Related identifiers
CVE-2011-0385
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com