Vulnerabilities

TI-2012-02652 CVE-2012-3076 · GHSA-qpp8-m6p9-xw2x

The administrative web interface on Cisco TelePresence Recording Server before 1.8.0…

MEDIUM 43

The administrative web interface on Cisco TelePresence Recording Server before 1.8.0 allows remote authenticated users to execute arbitrary commands via unspecified vectors, aka Bug ID CSCth85804.

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.02165 Published 2012-07-12 No fix listed CWE-78

TI-2012-02649 CVE-2012-3073 · GHSA-98vh-jxvm-fp49

The IP implementation on Cisco TelePresence Multipoint Switch before 1.8.1, Cisco…

LOW 38

The IP implementation on Cisco TelePresence Multipoint Switch before 1.8.1, Cisco TelePresence Manager before 1.9.0, and Cisco TelePresence Recording Server 1.8 and earlier allows remote attackers to cause a denial of se…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.01799 Published 2012-07-12 No fix listed

TI-2012-02176 CVE-2012-2486 · GHSA-p7jm-64r8-c5vp

The Cisco Discovery Protocol (CDP) implementation on Cisco TelePresence Multipoint Switch…

MEDIUM 40

The Cisco Discovery Protocol (CDP) implementation on Cisco TelePresence Multipoint Switch before 1.9.0, Cisco TelePresence Immersive Endpoint Devices before 1.9.1, Cisco TelePresence Manager before 1.9.0, and Cisco TeleP…

CVSS 2.0HIGH 8.3 Adjacent network No auth Interaction — EPSS 0.01745 Published 2012-07-12 No fix listed CWE-94

TI-2011-00328 CVE-2011-0392 · GHSA-8fr7-2mr9-63wj

Cisco TelePresence Recording Server devices with software 1.6.x do not require…

LOW 37

Cisco TelePresence Recording Server devices with software 1.6.x do not require authentication for an XML-RPC interface, which allows remote attackers to perform unspecified actions via a session on TCP port 8080, aka Bug…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02388 Published 2011-02-25 No fix listed CWE-287

TI-2011-00327 CVE-2011-0391 · GHSA-2c4f-33fr-h9q2

Cisco TelePresence Recording Server devices with software 1.6.x allow remote attackers to…

LOW 39

Cisco TelePresence Recording Server devices with software 1.6.x allow remote attackers to cause a denial of service (thread consumption and device outage) via a malformed request, related to an "ad hoc recording" issue,…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.0257 Published 2011-02-25 No fix listed CWE-399

TI-2011-00324 CVE-2011-0388 · GHSA-gm8g-8hpq-cm8m

Cisco TelePresence Recording Server devices with software 1.6.x and Cisco TelePresence…

LOW 39

Cisco TelePresence Recording Server devices with software 1.6.x and Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x do not properly restrict remote access to the Java serv…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.02599 Published 2011-02-25 No fix listed CWE-399

TI-2011-00322 CVE-2011-0386 · GHSA-rm9r-mxqr-25v7

The XML-RPC implementation on Cisco TelePresence Recording Server devices with software…

MEDIUM 47

The XML-RPC implementation on Cisco TelePresence Recording Server devices with software 1.6.x and 1.7.x before 1.7.1 allows remote attackers to overwrite files and consequently execute arbitrary code via a malformed requ…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.0448 Published 2011-02-25 No fix listed CWE-94

TI-2011-00321 CVE-2011-0385 · GHSA-c7mf-3c4g-q9f2

The administrative web interface on Cisco TelePresence Recording Server devices with…

MEDIUM 51

The administrative web interface on Cisco TelePresence Recording Server devices with software 1.6.x and Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x allows remote attac…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05226 Published 2011-02-25 No fix listed

TI-2011-00319 CVE-2011-0383 · GHSA-7wrc-jf8c-7fmx

The Java Servlet framework on Cisco TelePresence Recording Server devices with software…

MEDIUM 52

The Java Servlet framework on Cisco TelePresence Recording Server devices with software 1.6.x before 1.6.2 and Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x does not req…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06472 Published 2011-02-25 No fix listed CWE-287

TI-2011-00318 CVE-2011-0382 · GHSA-723c-85j6-84g2

The CGI subsystem on Cisco TelePresence Recording Server devices with software 1.6.x…

MEDIUM 50

The CGI subsystem on Cisco TelePresence Recording Server devices with software 1.6.x before 1.6.2 allows remote attackers to execute arbitrary commands via a request to TCP port 443, related to a "command injection vulne…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04194 Published 2011-02-25 No fix listed CWE-78

Vulnerabilities

Filters