CVE-2011-0372

Published Feb 25, 2011 CVSS 2.0 · 10.0 Critical EPSS 3.3% KEV · Not listed
Description
The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote attackers to execute arbitrary commands via a malformed request, related to "command injection vulnerabilities," aka Bug ID CSCtb31640.

Analysis

No analysis available yet

Remediation

No remediation available yet

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2011-0398 The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote attackers to execute arbitrary commands via a malformed request, related to "command injection vulnerabilities," aka Bug ID CSCtb31640.
History

No history.

Weaknesses
  • CWE-78

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Sources

Status
PUBLISHED
Assigner
cisco
Published
Updated
Aug 6, 2024, 9:51 PM
Reserved
Jan 7, 2011, 12:00 AM
Status
Modified
Published
Feb 25, 2011, 12:00 PM
Modified
Jun 16, 2026, 11:27 PM