Vulnerability Details : CVE-2011-0376
The TFTP implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x, 1.6.0, and 1.6.1 allows remote attackers to obtain sensitive information via a GET request, aka Bug ID CSCte43876.
Vulnerability category: Information leak
Exploit prediction scoring system (EPSS) score for CVE-2011-0376
Probability of exploitation activity in the next 30 days: 0.40%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 70 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2011-0376
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
|---|---|---|---|---|---|
|
10.0
|
HIGH | AV:N/AC:L/Au:N/C:C/I:C/A:C |
10.0
|
10.0
|
NIST |
CWE ids for CVE-2011-0376
-
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.Assigned by: nvd@nist.gov (Primary)
References for CVE-2011-0376
-
http://www.securitytracker.com/id?1025112
Cisco TelePresence Endpoint Devices Have Flaws That Let Remote Users Deny Service and Execute Arbitrary Commands and Code - SecurityTracker
-
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e152.shtml
Multiple Vulnerabilities in Cisco TelePresence Endpoint Devices - CiscoVendor Advisory
Products affected by CVE-2011-0376
- cpe:2.3:a:cisco:telepresence_system_software:1.5.11:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:telepresence_system_software:1.5.12:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:telepresence_system_software:1.2.3:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:telepresence_system_software:1.5.10:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:telepresence_system_software:1.4.7:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:telepresence_system_software:1.3.2:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:telepresence_system_software:1.5.13:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:telepresence_system_software:1.5.3:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:telepresence_system_software:1.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:telepresence_system_software:1.6.0:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:telepresence_system_software:1.6.1:*:*:*:*:*:*:*
- cpe:2.3:h:cisco:telepresence_system_1000:*:*:*:*:*:*:*:*
- cpe:2.3:h:cisco:telepresence_system_1100:*:*:*:*:*:*:*:*
- cpe:2.3:h:cisco:telepresence_system_3000:*:*:*:*:*:*:*:*
- cpe:2.3:h:cisco:telepresence_system_1300_series:*:*:*:*:*:*:*:*
- cpe:2.3:h:cisco:telepresence_system_3200_series:*:*:*:*:*:*:*:*
- cpe:2.3:h:cisco:telepresence_system_500_series:*:*:*:*:*:*:*:*