CVE-2011-0384
Severity Score
10.0
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The Java Servlet framework on Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x does not require administrative authentication for unspecified actions, which allows remote attackers to execute arbitrary code via a crafted request, aka Bug ID CSCtf01253.
El Java Servlet framework en dispositivos Cisco TelePresence Multipoint Switch (CTMS) con software v1.0.x, v1.1.x, v1.5.x, y v1.6.x no requiere autenticación administrativa para acciones no especificadas, permitiendo a atacantes remotos ejecutar código arbitrario mediante una petición manipulada, también conocido como error ID CSCtf01253.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2011-01-07 CVE Reserved
- 2011-02-23 CVE Published
- 2024-08-06 CVE Updated
- 2024-10-18 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-287: Improper Authentication
CAPEC
References (4)
| URL | Tag | Source |
|---|---|---|
| http://www.securityfocus.com/bid/46520 | Vdb Entry | |
| http://www.securitytracker.com/id?1025113 | Vdb Entry | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/65620 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e14e.shtml | 2017-08-17 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Cisco Search vendor "Cisco" | Telepresence Multipoint Switch Software Search vendor "Cisco" for product "Telepresence Multipoint Switch Software" | 1.0.4.0 Search vendor "Cisco" for product "Telepresence Multipoint Switch Software" and version "1.0.4.0" | - |
Affected
| in | Cisco Search vendor "Cisco" | Telepresence Multipoint Switch Search vendor "Cisco" for product "Telepresence Multipoint Switch" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Telepresence Multipoint Switch Software Search vendor "Cisco" for product "Telepresence Multipoint Switch Software" | 1.1.0 Search vendor "Cisco" for product "Telepresence Multipoint Switch Software" and version "1.1.0" | - |
Affected
| in | Cisco Search vendor "Cisco" | Telepresence Multipoint Switch Search vendor "Cisco" for product "Telepresence Multipoint Switch" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Telepresence Multipoint Switch Software Search vendor "Cisco" for product "Telepresence Multipoint Switch Software" | 1.1.1 Search vendor "Cisco" for product "Telepresence Multipoint Switch Software" and version "1.1.1" | - |
Affected
| in | Cisco Search vendor "Cisco" | Telepresence Multipoint Switch Search vendor "Cisco" for product "Telepresence Multipoint Switch" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Telepresence Multipoint Switch Software Search vendor "Cisco" for product "Telepresence Multipoint Switch Software" | 1.1.2 Search vendor "Cisco" for product "Telepresence Multipoint Switch Software" and version "1.1.2" | - |
Affected
| in | Cisco Search vendor "Cisco" | Telepresence Multipoint Switch Search vendor "Cisco" for product "Telepresence Multipoint Switch" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Telepresence Multipoint Switch Software Search vendor "Cisco" for product "Telepresence Multipoint Switch Software" | 1.5.0 Search vendor "Cisco" for product "Telepresence Multipoint Switch Software" and version "1.5.0" | - |
Affected
| in | Cisco Search vendor "Cisco" | Telepresence Multipoint Switch Search vendor "Cisco" for product "Telepresence Multipoint Switch" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Telepresence Multipoint Switch Software Search vendor "Cisco" for product "Telepresence Multipoint Switch Software" | 1.5.1 Search vendor "Cisco" for product "Telepresence Multipoint Switch Software" and version "1.5.1" | - |
Affected
| in | Cisco Search vendor "Cisco" | Telepresence Multipoint Switch Search vendor "Cisco" for product "Telepresence Multipoint Switch" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Telepresence Multipoint Switch Software Search vendor "Cisco" for product "Telepresence Multipoint Switch Software" | 1.5.2 Search vendor "Cisco" for product "Telepresence Multipoint Switch Software" and version "1.5.2" | - |
Affected
| in | Cisco Search vendor "Cisco" | Telepresence Multipoint Switch Search vendor "Cisco" for product "Telepresence Multipoint Switch" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Telepresence Multipoint Switch Software Search vendor "Cisco" for product "Telepresence Multipoint Switch Software" | 1.5.3 Search vendor "Cisco" for product "Telepresence Multipoint Switch Software" and version "1.5.3" | - |
Affected
| in | Cisco Search vendor "Cisco" | Telepresence Multipoint Switch Search vendor "Cisco" for product "Telepresence Multipoint Switch" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Telepresence Multipoint Switch Software Search vendor "Cisco" for product "Telepresence Multipoint Switch Software" | 1.5.4 Search vendor "Cisco" for product "Telepresence Multipoint Switch Software" and version "1.5.4" | - |
Affected
| in | Cisco Search vendor "Cisco" | Telepresence Multipoint Switch Search vendor "Cisco" for product "Telepresence Multipoint Switch" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Telepresence Multipoint Switch Software Search vendor "Cisco" for product "Telepresence Multipoint Switch Software" | 1.5.5 Search vendor "Cisco" for product "Telepresence Multipoint Switch Software" and version "1.5.5" | - |
Affected
| in | Cisco Search vendor "Cisco" | Telepresence Multipoint Switch Search vendor "Cisco" for product "Telepresence Multipoint Switch" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Telepresence Multipoint Switch Software Search vendor "Cisco" for product "Telepresence Multipoint Switch Software" | 1.5.6 Search vendor "Cisco" for product "Telepresence Multipoint Switch Software" and version "1.5.6" | - |
Affected
| in | Cisco Search vendor "Cisco" | Telepresence Multipoint Switch Search vendor "Cisco" for product "Telepresence Multipoint Switch" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Telepresence Multipoint Switch Software Search vendor "Cisco" for product "Telepresence Multipoint Switch Software" | 1.6.0 Search vendor "Cisco" for product "Telepresence Multipoint Switch Software" and version "1.6.0" | - |
Affected
| in | Cisco Search vendor "Cisco" | Telepresence Multipoint Switch Search vendor "Cisco" for product "Telepresence Multipoint Switch" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Telepresence Multipoint Switch Software Search vendor "Cisco" for product "Telepresence Multipoint Switch Software" | 1.6.1 Search vendor "Cisco" for product "Telepresence Multipoint Switch Software" and version "1.6.1" | - |
Affected
| in | Cisco Search vendor "Cisco" | Telepresence Multipoint Switch Search vendor "Cisco" for product "Telepresence Multipoint Switch" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Telepresence Multipoint Switch Software Search vendor "Cisco" for product "Telepresence Multipoint Switch Software" | 1.6.2 Search vendor "Cisco" for product "Telepresence Multipoint Switch Software" and version "1.6.2" | - |
Affected
| in | Cisco Search vendor "Cisco" | Telepresence Multipoint Switch Search vendor "Cisco" for product "Telepresence Multipoint Switch" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Telepresence Multipoint Switch Software Search vendor "Cisco" for product "Telepresence Multipoint Switch Software" | 1.6.3 Search vendor "Cisco" for product "Telepresence Multipoint Switch Software" and version "1.6.3" | - |
Affected
| in | Cisco Search vendor "Cisco" | Telepresence Multipoint Switch Search vendor "Cisco" for product "Telepresence Multipoint Switch" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Telepresence Multipoint Switch Software Search vendor "Cisco" for product "Telepresence Multipoint Switch Software" | 1.6.4 Search vendor "Cisco" for product "Telepresence Multipoint Switch Software" and version "1.6.4" | - |
Affected
| in | Cisco Search vendor "Cisco" | Telepresence Multipoint Switch Search vendor "Cisco" for product "Telepresence Multipoint Switch" | * | - |
Affected
|