CVE-2011-0378

Cisco TelePresence System Software 1.2.x-1.5.x - Remote Code Execution via XML-RPC TCP Request

Title source: llm

Description

The XML-RPC implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote attackers to execute arbitrary commands via a TCP request, related to a "command injection vulnerability," aka Bug ID CSCtb52587.

References (2)

Core 2

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1025112

Vendor Advisory vendor-advisory x_refsource_cisco

http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e152.shtml

Scores

EPSS 0.0138

EPSS Percentile 68.8%

Details

CWE

CWE-78

Status published

Products (15)

cisco/telepresence_system_1000

cisco/telepresence_system_1100

cisco/telepresence_system_1300_series

cisco/telepresence_system_3000

cisco/telepresence_system_3200_series

cisco/telepresence_system_500_series

cisco/telepresence_system_software 1.2.3

cisco/telepresence_system_software 1.3.2

cisco/telepresence_system_software 1.4.7

cisco/telepresence_system_software 1.5.1

... and 5 more

Published Feb 25, 2011

Tracked Since Feb 18, 2026