CVE-2011-0374
25.02.2011, 12:00
The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote authenticated users to execute arbitrary commands via a malformed request, related to "command injection vulnerabilities," aka Bug ID CSCtb31659.
OS Command Injection
| Vendor | Product | Version |
|---|---|---|
| cisco | telepresence_system_software | 1.2.3 |
| cisco | telepresence_system_software | 1.3.2 |
| cisco | telepresence_system_software | 1.4.7 |
| cisco | telepresence_system_software | 1.5.1 |
| cisco | telepresence_system_software | 1.5.3 |
| cisco | telepresence_system_software | 1.5.10 |
| cisco | telepresence_system_software | 1.5.11 |
| cisco | telepresence_system_software | 1.5.12 |
| cisco | telepresence_system_software | 1.5.13 |
| cisco | telepresence_system_1000 | * |
| cisco | telepresence_system_1100 | * |
| cisco | telepresence_system_software | 1.2.3 |
| cisco | telepresence_system_software | 1.3.2 |
| cisco | telepresence_system_software | 1.4.7 |
| cisco | telepresence_system_software | 1.5.1 |
| cisco | telepresence_system_software | 1.5.3 |
| cisco | telepresence_system_software | 1.5.10 |
| cisco | telepresence_system_software | 1.5.11 |
| cisco | telepresence_system_software | 1.5.12 |
| cisco | telepresence_system_software | 1.5.13 |
| cisco | telepresence_system_3000 | * |
| cisco | telepresence_system_software | 1.5.10 |
| cisco | telepresence_system_software | 1.5.11 |
| cisco | telepresence_system_software | 1.5.12 |
| cisco | telepresence_system_software | 1.5.13 |
| cisco | telepresence_system_1300_series | * |
| cisco | telepresence_system_3200_series | * |
| cisco | telepresence_system_software | 1.4.7 |
| cisco | telepresence_system_software | 1.5.1 |
| cisco | telepresence_system_software | 1.5.3 |
| cisco | telepresence_system_software | 1.5.10 |
| cisco | telepresence_system_software | 1.5.11 |
| cisco | telepresence_system_software | 1.5.12 |
| cisco | telepresence_system_software | 1.5.13 |
| cisco | telepresence_system_500_series | * |
𝑥
= Vulnerable software versions