CVE-2011-0372

Cisco TelePresence System Software 1.2.x-1.5.x - Remote Command Injection via Malformed CGI Request

Title source: llm

Description

The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote attackers to execute arbitrary commands via a malformed request, related to "command injection vulnerabilities," aka Bug ID CSCtb31640.

References (2)

Core 2

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1025112

Vendor Advisory vendor-advisory x_refsource_cisco

http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e152.shtml

Scores

EPSS 0.0335

EPSS Percentile 87.2%

Details

CWE

CWE-78

Status published

Products (15)

cisco/telepresence_system_1000

cisco/telepresence_system_1100

cisco/telepresence_system_1300_series

cisco/telepresence_system_3000

cisco/telepresence_system_3200_series

cisco/telepresence_system_500_series

cisco/telepresence_system_software 1.2.3

cisco/telepresence_system_software 1.3.2

cisco/telepresence_system_software 1.4.7

cisco/telepresence_system_software 1.5.1

... and 5 more

Published Feb 25, 2011

Tracked Since Feb 18, 2026