CVE-2011-0382

published 2011-02-25

CVE-2011-0382: The CGI subsystem on Cisco TelePresence Recording Server devices with software 1.6.x before 1.6.2 allows remote attackers to execute arbitrary commands via a…

Priority P2 60 critical 10 CVSS 2.0

AV N AC L Au N C C I C A C

The CGI subsystem on Cisco TelePresence Recording Server devices with software 1.6.x before 1.6.2 allows remote attackers to execute arbitrary commands via a request to TCP port 443, related to a "command injection vulnerability," aka Bug ID CSCtf97221.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
cisco	telepresence_recording_server	—	—
cisco	telepresence_recording_server_software	—	—

Detection & IOCs extracted from sources · hover to see the quote

port TCP/443↗

• → Monitor for unexpected command execution originating from CGI subsystem requests on TCP port 443 on Cisco TelePresence Recording Server devices running software version 1.6.x before 1.6.2. ↗
• → Correlate findings against Cisco Bug IDs CSCtf42008, CSCtf42005, CSCth61065, CSCth85786, CSCtd75754 for related vulnerabilities on the same platform (CWE-264, CWE-287, CWE-399). ↗

• · Vulnerability is specific to Cisco TelePresence Recording Server software versions 1.6.x prior to 1.6.2. Devices running 1.6.2 or later are not affected by this specific command injection issue. ↗

CVSS provenance

nvd v2.0 10.0 CRITICAL AV:N/AC:L/Au:N/C:C/I:C/A:C

vendor_cisco 10.0 CRITICAL

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-78 CWE-264 CWE-287 CWE-399