CVE-2011-2543
Cisco TelePresence SOS-11-010 - Multiple Vulnerabilities
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
3Exploited in Wild
-Decision
Descriptions
Buffer overflow in the cuil component in Cisco Telepresence System Integrator C Series 4.x before TC4.2.0 allows remote authenticated users to cause a denial of service (endpoint reboot or process crash) or possibly execute arbitrary code via a long location parameter to the getxml program, aka Bug ID CSCtq46496.
Desbordamiento de búfer en el componente cuil de Cisco TelePresence System Integrator de la Serie C 4.x antes de TC4.2.0, permite a usuarios autenticados remotamente provocar una denegación de servicio (reinicio de punto final o caída del proceso) o posiblemente ejecutar código de su elección a través de un parámetro location largo en el programa GetXml, también conocido como Bug ID CSCtq46496.
Cisco TelePresensce Series suffers from client-side code execution, denial of service, cookie theft, loss of confidentiality, and impersonation vulnerabilities.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2011-06-27 CVE Reserved
- 2011-09-19 CVE Published
- 2011-09-19 First Exploit
- 2024-05-13 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
References (9)
URL | Tag | Source |
---|---|---|
http://securityreason.com/securityalert/8393 | Third Party Advisory | |
http://www.securityfocus.com/archive/1/519698/100/0/threaded | Mailing List | |
http://www.securityfocus.com/bid/49670 | Vdb Entry | |
https://exchange.xforce.ibmcloud.com/vulnerabilities/69907 | Vdb Entry |
URL | Date | SRC |
---|---|---|
https://www.exploit-db.com/exploits/17871 | 2011-09-19 | |
http://securitytracker.com/id?1026072 | 2024-08-06 | |
http://www.exploit-db.com/exploits/17871 | 2024-08-06 |
URL | Date | SRC |
---|
URL | Date | SRC |
---|---|---|
http://secunia.com/advisories/46057 | 2018-10-09 | |
http://secunia.com/advisories/46109 | 2018-10-09 |
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Cisco Search vendor "Cisco" | Telepresence Codec C40 Search vendor "Cisco" for product "Telepresence Codec C40" | * | - |
Affected
| in | Cisco Search vendor "Cisco" | Telepresence C Series Software Search vendor "Cisco" for product "Telepresence C Series Software" | tc4.0.0 Search vendor "Cisco" for product "Telepresence C Series Software" and version "tc4.0.0" | - |
Affected
|
Cisco Search vendor "Cisco" | Telepresence Codec C40 Search vendor "Cisco" for product "Telepresence Codec C40" | * | - |
Affected
| in | Cisco Search vendor "Cisco" | Telepresence C Series Software Search vendor "Cisco" for product "Telepresence C Series Software" | tc4.0.1 Search vendor "Cisco" for product "Telepresence C Series Software" and version "tc4.0.1" | - |
Affected
|
Cisco Search vendor "Cisco" | Telepresence Codec C40 Search vendor "Cisco" for product "Telepresence Codec C40" | * | - |
Affected
| in | Cisco Search vendor "Cisco" | Telepresence C Series Software Search vendor "Cisco" for product "Telepresence C Series Software" | tc4.0.4 Search vendor "Cisco" for product "Telepresence C Series Software" and version "tc4.0.4" | - |
Affected
|
Cisco Search vendor "Cisco" | Telepresence Codec C40 Search vendor "Cisco" for product "Telepresence Codec C40" | * | - |
Affected
| in | Cisco Search vendor "Cisco" | Telepresence C Series Software Search vendor "Cisco" for product "Telepresence C Series Software" | tc4.1.0 Search vendor "Cisco" for product "Telepresence C Series Software" and version "tc4.1.0" | - |
Affected
|
Cisco Search vendor "Cisco" | Telepresence Codec C40 Search vendor "Cisco" for product "Telepresence Codec C40" | * | - |
Affected
| in | Cisco Search vendor "Cisco" | Telepresence C Series Software Search vendor "Cisco" for product "Telepresence C Series Software" | tc4.1.1 Search vendor "Cisco" for product "Telepresence C Series Software" and version "tc4.1.1" | - |
Affected
|
Cisco Search vendor "Cisco" | Telepresence Codec C40 Search vendor "Cisco" for product "Telepresence Codec C40" | * | - |
Affected
| in | Cisco Search vendor "Cisco" | Telepresence C Series Software Search vendor "Cisco" for product "Telepresence C Series Software" | tc4.1.2 Search vendor "Cisco" for product "Telepresence C Series Software" and version "tc4.1.2" | - |
Affected
|
Cisco Search vendor "Cisco" | Telepresence Codec C60 Search vendor "Cisco" for product "Telepresence Codec C60" | * | - |
Affected
| in | Cisco Search vendor "Cisco" | Telepresence C Series Software Search vendor "Cisco" for product "Telepresence C Series Software" | tc4.0.0 Search vendor "Cisco" for product "Telepresence C Series Software" and version "tc4.0.0" | - |
Affected
|
Cisco Search vendor "Cisco" | Telepresence Codec C60 Search vendor "Cisco" for product "Telepresence Codec C60" | * | - |
Affected
| in | Cisco Search vendor "Cisco" | Telepresence C Series Software Search vendor "Cisco" for product "Telepresence C Series Software" | tc4.0.1 Search vendor "Cisco" for product "Telepresence C Series Software" and version "tc4.0.1" | - |
Affected
|
Cisco Search vendor "Cisco" | Telepresence Codec C60 Search vendor "Cisco" for product "Telepresence Codec C60" | * | - |
Affected
| in | Cisco Search vendor "Cisco" | Telepresence C Series Software Search vendor "Cisco" for product "Telepresence C Series Software" | tc4.0.4 Search vendor "Cisco" for product "Telepresence C Series Software" and version "tc4.0.4" | - |
Affected
|
Cisco Search vendor "Cisco" | Telepresence Codec C60 Search vendor "Cisco" for product "Telepresence Codec C60" | * | - |
Affected
| in | Cisco Search vendor "Cisco" | Telepresence C Series Software Search vendor "Cisco" for product "Telepresence C Series Software" | tc4.1.0 Search vendor "Cisco" for product "Telepresence C Series Software" and version "tc4.1.0" | - |
Affected
|
Cisco Search vendor "Cisco" | Telepresence Codec C60 Search vendor "Cisco" for product "Telepresence Codec C60" | * | - |
Affected
| in | Cisco Search vendor "Cisco" | Telepresence C Series Software Search vendor "Cisco" for product "Telepresence C Series Software" | tc4.1.1 Search vendor "Cisco" for product "Telepresence C Series Software" and version "tc4.1.1" | - |
Affected
|
Cisco Search vendor "Cisco" | Telepresence Codec C60 Search vendor "Cisco" for product "Telepresence Codec C60" | * | - |
Affected
| in | Cisco Search vendor "Cisco" | Telepresence C Series Software Search vendor "Cisco" for product "Telepresence C Series Software" | tc4.1.2 Search vendor "Cisco" for product "Telepresence C Series Software" and version "tc4.1.2" | - |
Affected
|
Cisco Search vendor "Cisco" | Telepresence Codec C90 Search vendor "Cisco" for product "Telepresence Codec C90" | * | - |
Affected
| in | Cisco Search vendor "Cisco" | Telepresence C Series Software Search vendor "Cisco" for product "Telepresence C Series Software" | tc4.0.0 Search vendor "Cisco" for product "Telepresence C Series Software" and version "tc4.0.0" | - |
Affected
|
Cisco Search vendor "Cisco" | Telepresence Codec C90 Search vendor "Cisco" for product "Telepresence Codec C90" | * | - |
Affected
| in | Cisco Search vendor "Cisco" | Telepresence C Series Software Search vendor "Cisco" for product "Telepresence C Series Software" | tc4.0.1 Search vendor "Cisco" for product "Telepresence C Series Software" and version "tc4.0.1" | - |
Affected
|
Cisco Search vendor "Cisco" | Telepresence Codec C90 Search vendor "Cisco" for product "Telepresence Codec C90" | * | - |
Affected
| in | Cisco Search vendor "Cisco" | Telepresence C Series Software Search vendor "Cisco" for product "Telepresence C Series Software" | tc4.0.4 Search vendor "Cisco" for product "Telepresence C Series Software" and version "tc4.0.4" | - |
Affected
|
Cisco Search vendor "Cisco" | Telepresence Codec C90 Search vendor "Cisco" for product "Telepresence Codec C90" | * | - |
Affected
| in | Cisco Search vendor "Cisco" | Telepresence C Series Software Search vendor "Cisco" for product "Telepresence C Series Software" | tc4.1.0 Search vendor "Cisco" for product "Telepresence C Series Software" and version "tc4.1.0" | - |
Affected
|
Cisco Search vendor "Cisco" | Telepresence Codec C90 Search vendor "Cisco" for product "Telepresence Codec C90" | * | - |
Affected
| in | Cisco Search vendor "Cisco" | Telepresence C Series Software Search vendor "Cisco" for product "Telepresence C Series Software" | tc4.1.1 Search vendor "Cisco" for product "Telepresence C Series Software" and version "tc4.1.1" | - |
Affected
|
Cisco Search vendor "Cisco" | Telepresence Codec C90 Search vendor "Cisco" for product "Telepresence Codec C90" | * | - |
Affected
| in | Cisco Search vendor "Cisco" | Telepresence C Series Software Search vendor "Cisco" for product "Telepresence C Series Software" | tc4.1.2 Search vendor "Cisco" for product "Telepresence C Series Software" and version "tc4.1.2" | - |
Affected
|