NVD

Id
7457  
Name
CVE-2011-0383  
Description
The Java Servlet framework on Cisco TelePresence Recording Server devices with software 1.6.x before 1.6.2 and Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x does not require administrative authentication for unspecified actions, which allows remote attackers to execute arbitrary code via a crafted request, aka Bug IDs CSCtf42005 and CSCtf42008.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2011-02-25  
Modified Date
2011-04-08  
Seq
2011-0383  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
41966 7457 CVE-2011-0383 20110223 Multiple Vulnerabilities in Cisco TelePresence Recording Server  View
41967 7457 CVE-2011-0383 20110223 Multiple Vulnerabilities in Cisco TelePresence Multipoint Switch  View
41968 7457 CVE-2011-0383 46519  View
41969 7457 CVE-2011-0383 1025113  View
41970 7457 CVE-2011-0383 1025114  View
41971 7457 CVE-2011-0383 telepresence-java-unauth-access(65602)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
32843 JVNDB-2011-003083 Cisco TelePresence Recording Server および Cisco TelePresence Multipoint Switch における脆弱性 Cisco TelePresence Recording Server および Cisco TelePresence Multipoint Switch 上の Java サーブレットのフレームワークは、不特定の操作への管理認証を要求しないため、任意のコードを実行される脆弱性が存在します。 CVE-2011-0383 48290 CVE-2011-0383 7457 10 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003083.html 2011-02-23 2011-11-29 View