PT-2011-4073

CVE-2011-2763

·

Published

2011-09-02

·

Updated

2018-10-09

Description by

CVSS 2.0
7.5
High
MetricsAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions LifeSize Room appliance versions 3.5.3 through 4.7.18
Description The issue allows remote attackers to execute arbitrary commands via a modified request to the LSRoom Remoting.doCommand function in "gateway.php".
Recommendations For versions 3.5.3 through 4.7.18, as a temporary workaround, consider disabling the LSRoom Remoting.doCommand function in gateway.php until a patch is available.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-20: Improper Input Validation
Related identifiers
CVE-2011-2763
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com