NVD

Id
7458  
Name
CVE-2011-0384  
Description
The Java Servlet framework on Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x does not require administrative authentication for unspecified actions, which allows remote attackers to execute arbitrary code via a crafted request, aka Bug ID CSCtf01253.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2011-02-25  
Modified Date
2011-03-17  
Seq
2011-0384  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
41972 7458 CVE-2011-0384 20110223 Multiple Vulnerabilities in Cisco TelePresence Multipoint Switch  View
41973 7458 CVE-2011-0384 46520  View
41974 7458 CVE-2011-0384 1025113  View
41975 7458 CVE-2011-0384 cisco-switch-java-unauth-access(65620)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
32844 JVNDB-2011-003084 Cisco TelePresence Multipoint Switch における任意のコードを実行される脆弱性 Cisco TelePresence Multipoint Switch 上の Java サーブレットのフレームワークは、不特定の操作への管理認証を要求しないため、任意のコードを実行される脆弱性が存在します。 CVE-2011-0384 48291 CVE-2011-0384 7458 10 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003084.html 2011-02-23 2011-11-29 View