CVE-2011-0378

Published Feb 25, 2011 CVSS 2.0 · 8.3 High EPSS 1.4% KEV · Not listed
Description
The XML-RPC implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote attackers to execute arbitrary commands via a TCP request, related to a "command injection vulnerability," aka Bug ID CSCtb52587.

Analysis

No analysis available yet

Remediation

No remediation available yet

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2011-0404 The XML-RPC implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote attackers to execute arbitrary commands via a TCP request, related to a "command injection vulnerability," aka Bug ID CSCtb52587.
History

No history.

Weaknesses
  • CWE-78

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Sources

Status
PUBLISHED
Assigner
cisco
Published
Updated
Aug 6, 2024, 9:51 PM
Reserved
Jan 7, 2011, 12:00 AM
Status
Modified
Published
Feb 25, 2011, 12:00 PM
Modified
Jun 16, 2026, 11:27 PM