CVE-2011-0372

CWE-78 — OS Command Injection CWE-119 — Buffer Overflow CWE-200 — Information Exposure CWE-264 CWE-3994 documents4 sources

Severity

10.0CRITICAL

EPSS

4.0%

top 11.56%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Cisco Telepresence System Software

Timeline

PublishedFeb 25

Latest updateMay 17

Description

The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote attackers to execute arbitrary commands via a malformed request, related to "command injection vulnerabilities," aka Bug ID CSCtb31640.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages1 packages

▶NVDcisco/telepresence_system_software9 versions+8

🔴Vulnerability Details

GHSA

GHSA-g9h5-7rff-phrm: The CGI implementation on Cisco TelePresence endpoint devices with software 1↗2022-05-17

▶

CVEList

CVE-2011-0372: The CGI implementation on Cisco TelePresence endpoint devices with software 1↗2011-02-25

▶

📋Vendor Advisories

Cisco

Multiple Vulnerabilities in Cisco TelePresence Endpoint Devices↗2011-02-23

▶