CVE-2013-3454
Cisco TelePresence System Software <=1.10.1 & TX 9X00 <=6.0.3 - Unauthenticated Config Mod via Default pwrecovery
Title source: llmDescription
Cisco TelePresence System Software 1.10.1 and earlier on 500, 13X0, 1X00, 30X0, and 3X00 devices, and 6.0.3 and earlier on TX 9X00 devices, has a default password for the pwrecovery account, which makes it easier for remote attackers to modify the configuration or perform arbitrary actions via HTTPS requests, aka Bug ID CSCui43128.
References (1)
Core 1
Core References
Vendor Advisory vendor-advisory
x_refsource_cisco
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130807-tp
Scores
EPSS
0.0210
EPSS Percentile
79.7%
Details
CWE
CWE-255
Status
published
Products (50)
cisco/telepresence_system_1300
cisco/telepresence_system_1300-65
cisco/telepresence_system_3000
cisco/telepresence_system_3010
cisco/telepresence_system_3200
cisco/telepresence_system_3210
cisco/telepresence_system_500-32
cisco/telepresence_system_500-37
cisco/telepresence_system_software
1.9.0\(46\)
cisco/telepresence_system_software
1.9.0.1\(3\)
... and 40 more
Published
Aug 08, 2013
Tracked Since
Feb 18, 2026