CVE-2011-0378
Severity CVSS v4.0:
Pending analysis
Type:
CWE-78
OS Command Injections
Publication date:
25/02/2011
Last modified:
11/04/2025
Description
The XML-RPC implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote attackers to execute arbitrary commands via a TCP request, related to a "command injection vulnerability," aka Bug ID CSCtb52587.
Impact
Base Score 2.0
8.30
Severity 2.0
HIGH
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:a:cisco:telepresence_system_software:1.2.3:*:*:*:*:*:*:* | ||
| cpe:2.3:a:cisco:telepresence_system_software:1.3.2:*:*:*:*:*:*:* | ||
| cpe:2.3:a:cisco:telepresence_system_software:1.4.7:*:*:*:*:*:*:* | ||
| cpe:2.3:a:cisco:telepresence_system_software:1.5.1:*:*:*:*:*:*:* | ||
| cpe:2.3:a:cisco:telepresence_system_software:1.5.3:*:*:*:*:*:*:* | ||
| cpe:2.3:a:cisco:telepresence_system_software:1.5.10:*:*:*:*:*:*:* | ||
| cpe:2.3:a:cisco:telepresence_system_software:1.5.11:*:*:*:*:*:*:* | ||
| cpe:2.3:a:cisco:telepresence_system_software:1.5.12:*:*:*:*:*:*:* | ||
| cpe:2.3:a:cisco:telepresence_system_software:1.5.13:*:*:*:*:*:*:* | ||
| cpe:2.3:h:cisco:telepresence_system_1000:*:*:*:*:*:*:*:* | ||
| cpe:2.3:h:cisco:telepresence_system_1100:*:*:*:*:*:*:*:* | ||
| cpe:2.3:a:cisco:telepresence_system_software:1.2.3:*:*:*:*:*:*:* | ||
| cpe:2.3:a:cisco:telepresence_system_software:1.3.2:*:*:*:*:*:*:* | ||
| cpe:2.3:a:cisco:telepresence_system_software:1.4.7:*:*:*:*:*:*:* | ||
| cpe:2.3:a:cisco:telepresence_system_software:1.5.1:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page