CVE-2011-0392

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Recording Server devices with software 1.6.x

Description The issue concerns a lack of authentication for an XML-RPC interface, allowing remote attackers to perform unspecified actions via a session on TCP port 8080.

Recommendations For Cisco TelePresence Recording Server devices with software 1.6.x, consider restricting access to the XML-RPC interface on TCP port 8080 until a fix is available. As a temporary workaround, limit access to trusted sources to minimize the risk of exploitation.