Description
goform/websXMLAdminRequestCgi.cgi in Cisco Unified Videoconferencing (UVC) System 5110 and 5115, and possibly Unified Videoconferencing System 3545 and 5230, Unified Videoconferencing 3527 Primary Rate Interface (PRI) Gateway, Unified Videoconferencing 3522 Basic Rate Interfaces (BRI) Gateway, and Unified Videoconferencing 3515 Multipoint Control Unit (MCU), allows remote authenticated administrators to execute arbitrary commands via the username field, related to a "shell command injection vulnerability," aka Bug ID CSCti54059.
References (5)
Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/44922
Various Sources x_refsource_misc
http://www.trustmatta.com/advisories/MATTA-2010-001.txt
Vendor Advisory vendor-advisory
x_refsource_cisco
http://www.cisco.com/en/US/products/products_security_response09186a0080b56d0d.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id?1024753
Mailing List mailing-list
x_refsource_fulldisc
http://seclists.org/fulldisclosure/2010/Nov/167
Scores
EPSS
0.0293
EPSS Percentile
85.4%
Details
CWE
CWE-94
Status
published
Products (14)
cisco/unified_videoconferencing_system_3515_multipoint_control_unit
cisco/unified_videoconferencing_system_3515_multipoint_control_unit_firmware
7.0.1.13.3
cisco/unified_videoconferencing_system_3522_basic_rate_interface_gateway
cisco/unified_videoconferencing_system_3522_basic_rate_interface_gateway_firmware
7.0.1.13.3
cisco/unified_videoconferencing_system_3527_primary_rate_interface_gateway
cisco/unified_videoconferencing_system_3527_primary_rate_interface_gateway_firmware
7.0.1.13.3
cisco/unified_videoconferencing_system_3545
cisco/unified_videoconferencing_system_3545_firmware
7.0.1.13.3
cisco/unified_videoconferencing_system_5110
cisco/unified_videoconferencing_system_5110_firmware
7.0.1.13.3
... and 4 more
Published
Nov 22, 2010
Tracked Since
Feb 18, 2026