Cisco » Telepresence Multipoint Switch : Security Vulnerabilities, CVEs, (Bypass)
The Java Servlet framework on Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x does not require administrative authentication for unspecified actions, which allows remote attackers to execute arbitrary code via a crafted request, aka Bug ID CSCtf01253.
Max CVSS
10.0
EPSS Score
3.49%
Published
2011-02-25
Updated
2017-08-17
The Java Servlet framework on Cisco TelePresence Recording Server devices with software 1.6.x before 1.6.2 and Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x does not require administrative authentication for unspecified actions, which allows remote attackers to execute arbitrary code via a crafted request, aka Bug IDs CSCtf42005 and CSCtf42008.
Max CVSS
10.0
EPSS Score
10.47%
Published
2011-02-25
Updated
2017-08-17
2 vulnerabilities found