CVE-2011-0378 - Vulnerability Details

Vendors	Products
Cisco	Telepresence System 1000 Telepresence System 1100 Telepresence System 1300 Series Telepresence System 3000 Telepresence System 3200 Series Telepresence System 500 Series Telepresence System Software

Link	Providers
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e152.shtml
http://www.securitytracker.com/id?1025112

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2011-02-23T00:00:00", "descriptions": [{"lang": "en", "value": "The XML-RPC implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote attackers to execute arbitrary commands via a TCP request, related to a \"command injection vulnerability,\" aka Bug ID CSCtb52587."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2011-03-31T09:00:00", "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco"}, "references": [{"name": "1025112", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id?1025112"}, {"name": "20110223 Multiple Vulnerabilities in Cisco TelePresence Endpoint Devices", "tags": ["vendor-advisory", "x_refsource_CISCO"], "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e152.shtml"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "psirt@cisco.com", "ID": "CVE-2011-0378", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The XML-RPC implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote attackers to execute arbitrary commands via a TCP request, related to a \"command injection vulnerability,\" aka Bug ID CSCtb52587."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "1025112", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id?1025112"}, {"name": "20110223 Multiple Vulnerabilities in Cisco TelePresence Endpoint Devices", "refsource": "CISCO", "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e152.shtml"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T21:51:08.961Z"}, "title": "CVE Program Container", "references": [{"name": "1025112", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://www.securitytracker.com/id?1025112"}, {"name": "20110223 Multiple Vulnerabilities in Cisco TelePresence Endpoint Devices", "tags": ["vendor-advisory", "x_refsource_CISCO", "x_transferred"], "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e152.shtml"}]}]}, "cveMetadata": {"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "assignerShortName": "cisco", "cveId": "CVE-2011-0378", "datePublished": "2011-02-25T11:00:00", "dateReserved": "2011-01-07T00:00:00", "dateUpdated": "2024-08-06T21:51:08.961Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : n/a (string)

vendor : n/a (string)

versions : [ »

0 : { »

status : affected (string)

version : n/a (string)

}

]

}

]

datePublic : 2011-02-23T00:00:00 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : The XML-RPC implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote attackers to execute arbitrary commands via a TCP request, related to a "command injection vulnerability," aka Bug ID CSCtb52587. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

description : n/a (string)

lang : en (string)

type : text (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2011-03-31T09:00:00 (string)

orgId : d1c1063e-7a18-46af-9102-31f8928bc633 (string)

shortName : cisco (string)

}

references : [ »

0 : { »

name : 1025112 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_SECTRACK (string)

]

url : http://www.securitytracker.com/id?1025112 (string)

}

1 : { »

name : 20110223 Multiple Vulnerabilities in Cisco TelePresence Endpoint Devices (string)

tags : [ »

0 : vendor-advisory (string)

1 : x_refsource_CISCO (string)

]

url : http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e152.shtml (string)

}

]

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : psirt@cisco.com (string)

ID : CVE-2011-0378 (string)

STATE : PUBLIC (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : n/a (string)

version : { »

version_data : [ »

0 : { »

version_value : n/a (string)

}

]

}

]

}

vendor_name : n/a (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : The XML-RPC implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote attackers to execute arbitrary commands via a TCP request, related to a "command injection vulnerability," aka Bug ID CSCtb52587. (string)

}

]

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : n/a (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : 1025112 (string)

refsource : SECTRACK (string)

url : http://www.securitytracker.com/id?1025112 (string)

}

1 : { »

name : 20110223 Multiple Vulnerabilities in Cisco TelePresence Endpoint Devices (string)

refsource : CISCO (string)

url : http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e152.shtml (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-06T21:51:08.961Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

name : 1025112 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_SECTRACK (string)

2 : x_transferred (string)

]

url : http://www.securitytracker.com/id?1025112 (string)

}

1 : { »

name : 20110223 Multiple Vulnerabilities in Cisco TelePresence Endpoint Devices (string)

tags : [ »

0 : vendor-advisory (string)

1 : x_refsource_CISCO (string)

2 : x_transferred (string)

]

url : http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e152.shtml (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : d1c1063e-7a18-46af-9102-31f8928bc633 (string)

assignerShortName : cisco (string)

cveId : CVE-2011-0378 (string)

datePublished : 2011-02-25T11:00:00 (string)

dateReserved : 2011-01-07T00:00:00 (string)

dateUpdated : 2024-08-06T21:51:08.961Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:cisco:telepresence_system_software:1.2.3:*:*:*:*:*:*:*", "matchCriteriaId": "C5EAB196-F648-42F7-9621-9D43FA9288C1", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:telepresence_system_software:1.3.2:*:*:*:*:*:*:*", "matchCriteriaId": "BFE7BB6D-16FF-4141-93A1-1B4EB7C1D46C", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:telepresence_system_software:1.4.7:*:*:*:*:*:*:*", "matchCriteriaId": "31487AA7-257C-4216-B5E5-6244FF06D00A", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:telepresence_system_software:1.5.1:*:*:*:*:*:*:*", "matchCriteriaId": "4062C260-C7B5-40E4-B77E-5AC1BFDB303D", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:telepresence_system_software:1.5.3:*:*:*:*:*:*:*", "matchCriteriaId": "4B9FF632-4F67-4D04-A7D9-FDDF24E22541", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:telepresence_system_software:1.5.10:*:*:*:*:*:*:*", "matchCriteriaId": "27ECF70E-A6FE-4277-B02A-F0551271446B", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:telepresence_system_software:1.5.11:*:*:*:*:*:*:*", "matchCriteriaId": "68CC9A38-CA82-4558-BC92-0433301570E9", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:telepresence_system_software:1.5.12:*:*:*:*:*:*:*", "matchCriteriaId": "F74C1145-E2DC-41A5-ADD8-282332124C8A", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:telepresence_system_software:1.5.13:*:*:*:*:*:*:*", "matchCriteriaId": "B1CB7370-5367-4C3E-9B0E-88A29E1E8704", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:telepresence_system_1000:*:*:*:*:*:*:*:*", "matchCriteriaId": "9397D7AF-428C-422C-8EB1-B7C59D567BB4", "vulnerable": true}, {"criteria": "cpe:2.3:h:cisco:telepresence_system_1100:*:*:*:*:*:*:*:*", "matchCriteriaId": "505B044D-2529-4605-9FD0-C6B8B534B4C3", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:cisco:telepresence_system_software:1.2.3:*:*:*:*:*:*:*", "matchCriteriaId": "C5EAB196-F648-42F7-9621-9D43FA9288C1", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:telepresence_system_software:1.3.2:*:*:*:*:*:*:*", "matchCriteriaId": "BFE7BB6D-16FF-4141-93A1-1B4EB7C1D46C", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:telepresence_system_software:1.4.7:*:*:*:*:*:*:*", "matchCriteriaId": "31487AA7-257C-4216-B5E5-6244FF06D00A", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:telepresence_system_software:1.5.1:*:*:*:*:*:*:*", "matchCriteriaId": "4062C260-C7B5-40E4-B77E-5AC1BFDB303D", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:telepresence_system_software:1.5.3:*:*:*:*:*:*:*", "matchCriteriaId": "4B9FF632-4F67-4D04-A7D9-FDDF24E22541", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:telepresence_system_software:1.5.10:*:*:*:*:*:*:*", "matchCriteriaId": "27ECF70E-A6FE-4277-B02A-F0551271446B", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:telepresence_system_software:1.5.11:*:*:*:*:*:*:*", "matchCriteriaId": "68CC9A38-CA82-4558-BC92-0433301570E9", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:telepresence_system_software:1.5.12:*:*:*:*:*:*:*", "matchCriteriaId": "F74C1145-E2DC-41A5-ADD8-282332124C8A", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:telepresence_system_software:1.5.13:*:*:*:*:*:*:*", "matchCriteriaId": "B1CB7370-5367-4C3E-9B0E-88A29E1E8704", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:telepresence_system_3000:*:*:*:*:*:*:*:*", "matchCriteriaId": "DC14CB1A-DE5C-4877-8FFB-DF2FA1ADE176", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:cisco:telepresence_system_software:1.5.10:*:*:*:*:*:*:*", "matchCriteriaId": "27ECF70E-A6FE-4277-B02A-F0551271446B", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:telepresence_system_software:1.5.11:*:*:*:*:*:*:*", "matchCriteriaId": "68CC9A38-CA82-4558-BC92-0433301570E9", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:telepresence_system_software:1.5.12:*:*:*:*:*:*:*", "matchCriteriaId": "F74C1145-E2DC-41A5-ADD8-282332124C8A", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:telepresence_system_software:1.5.13:*:*:*:*:*:*:*", "matchCriteriaId": "B1CB7370-5367-4C3E-9B0E-88A29E1E8704", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:telepresence_system_1300_series:*:*:*:*:*:*:*:*", "matchCriteriaId": "B6D3C3AC-464F-4BCB-B3FF-CE4718156109", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:cisco:telepresence_system_software:1.4.7:*:*:*:*:*:*:*", "matchCriteriaId": "31487AA7-257C-4216-B5E5-6244FF06D00A", "vulnerable": false}, {"criteria": "cpe:2.3:a:cisco:telepresence_system_software:1.5.1:*:*:*:*:*:*:*", "matchCriteriaId": "4062C260-C7B5-40E4-B77E-5AC1BFDB303D", "vulnerable": false}, {"criteria": "cpe:2.3:a:cisco:telepresence_system_software:1.5.3:*:*:*:*:*:*:*", "matchCriteriaId": "4B9FF632-4F67-4D04-A7D9-FDDF24E22541", "vulnerable": false}, {"criteria": "cpe:2.3:a:cisco:telepresence_system_software:1.5.10:*:*:*:*:*:*:*", "matchCriteriaId": "27ECF70E-A6FE-4277-B02A-F0551271446B", "vulnerable": false}, {"criteria": "cpe:2.3:a:cisco:telepresence_system_software:1.5.11:*:*:*:*:*:*:*", "matchCriteriaId": "68CC9A38-CA82-4558-BC92-0433301570E9", "vulnerable": false}, {"criteria": "cpe:2.3:a:cisco:telepresence_system_software:1.5.12:*:*:*:*:*:*:*", "matchCriteriaId": "F74C1145-E2DC-41A5-ADD8-282332124C8A", "vulnerable": false}, {"criteria": "cpe:2.3:a:cisco:telepresence_system_software:1.5.13:*:*:*:*:*:*:*", "matchCriteriaId": "B1CB7370-5367-4C3E-9B0E-88A29E1E8704", "vulnerable": false}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:telepresence_system_3200_series:*:*:*:*:*:*:*:*", "matchCriteriaId": "B9CB2EA2-9BC8-4FFD-B79C-0887D65B082B", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:cisco:telepresence_system_software:1.4.7:*:*:*:*:*:*:*", "matchCriteriaId": "31487AA7-257C-4216-B5E5-6244FF06D00A", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:telepresence_system_software:1.5.1:*:*:*:*:*:*:*", "matchCriteriaId": "4062C260-C7B5-40E4-B77E-5AC1BFDB303D", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:telepresence_system_software:1.5.3:*:*:*:*:*:*:*", "matchCriteriaId": "4B9FF632-4F67-4D04-A7D9-FDDF24E22541", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:telepresence_system_software:1.5.10:*:*:*:*:*:*:*", "matchCriteriaId": "27ECF70E-A6FE-4277-B02A-F0551271446B", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:telepresence_system_software:1.5.11:*:*:*:*:*:*:*", "matchCriteriaId": "68CC9A38-CA82-4558-BC92-0433301570E9", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:telepresence_system_software:1.5.12:*:*:*:*:*:*:*", "matchCriteriaId": "F74C1145-E2DC-41A5-ADD8-282332124C8A", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:telepresence_system_software:1.5.13:*:*:*:*:*:*:*", "matchCriteriaId": "B1CB7370-5367-4C3E-9B0E-88A29E1E8704", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:telepresence_system_500_series:*:*:*:*:*:*:*:*", "matchCriteriaId": "F04D64C3-9105-49CD-8CED-E802E348ECF0", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The XML-RPC implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote attackers to execute arbitrary commands via a TCP request, related to a \"command injection vulnerability,\" aka Bug ID CSCtb52587."}, {"lang": "es", "value": "La implementaci\u00f3n XML-RPC en dispositivos Cisco TelePresence endpoint con software v1.2.x hasta v1.5.x permite a atacantes remotos ejecutar c\u00f3digo arbitrario mediante una petici\u00f3n TCP, relacionado con una \"vulnerabilidad de inyecci\u00f3n de comandos\", tambi\u00e9n conocido como error ID CSCtb52587."}], "id": "CVE-2011-0378", "lastModified": "2025-04-11T00:51:21.963", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "ADJACENT_NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 8.3, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:A/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 6.5, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2011-02-25T12:00:18.307", "references": [{"source": "psirt@cisco.com", "tags": ["Vendor Advisory"], "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e152.shtml"}, {"source": "psirt@cisco.com", "url": "http://www.securitytracker.com/id?1025112"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e152.shtml"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securitytracker.com/id?1025112"}], "sourceIdentifier": "psirt@cisco.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-78"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:cisco:telepresence_system_software:1.2.3:*:*:*:*:*:*:* (string)

matchCriteriaId : C5EAB196-F648-42F7-9621-9D43FA9288C1 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:cisco:telepresence_system_software:1.3.2:*:*:*:*:*:*:* (string)

matchCriteriaId : BFE7BB6D-16FF-4141-93A1-1B4EB7C1D46C (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:cisco:telepresence_system_software:1.4.7:*:*:*:*:*:*:* (string)

matchCriteriaId : 31487AA7-257C-4216-B5E5-6244FF06D00A (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:cisco:telepresence_system_software:1.5.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 4062C260-C7B5-40E4-B77E-5AC1BFDB303D (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:cisco:telepresence_system_software:1.5.3:*:*:*:*:*:*:* (string)

matchCriteriaId : 4B9FF632-4F67-4D04-A7D9-FDDF24E22541 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:cisco:telepresence_system_software:1.5.10:*:*:*:*:*:*:* (string)

matchCriteriaId : 27ECF70E-A6FE-4277-B02A-F0551271446B (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:cisco:telepresence_system_software:1.5.11:*:*:*:*:*:*:* (string)

matchCriteriaId : 68CC9A38-CA82-4558-BC92-0433301570E9 (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:cisco:telepresence_system_software:1.5.12:*:*:*:*:*:*:* (string)

matchCriteriaId : F74C1145-E2DC-41A5-ADD8-282332124C8A (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:a:cisco:telepresence_system_software:1.5.13:*:*:*:*:*:*:* (string)

matchCriteriaId : B1CB7370-5367-4C3E-9B0E-88A29E1E8704 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:cisco:telepresence_system_1000:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 9397D7AF-428C-422C-8EB1-B7C59D567BB4 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:h:cisco:telepresence_system_1100:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 505B044D-2529-4605-9FD0-C6B8B534B4C3 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

1 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:cisco:telepresence_system_software:1.2.3:*:*:*:*:*:*:* (string)

matchCriteriaId : C5EAB196-F648-42F7-9621-9D43FA9288C1 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:cisco:telepresence_system_software:1.3.2:*:*:*:*:*:*:* (string)

matchCriteriaId : BFE7BB6D-16FF-4141-93A1-1B4EB7C1D46C (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:cisco:telepresence_system_software:1.4.7:*:*:*:*:*:*:* (string)

matchCriteriaId : 31487AA7-257C-4216-B5E5-6244FF06D00A (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:cisco:telepresence_system_software:1.5.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 4062C260-C7B5-40E4-B77E-5AC1BFDB303D (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:cisco:telepresence_system_software:1.5.3:*:*:*:*:*:*:* (string)

matchCriteriaId : 4B9FF632-4F67-4D04-A7D9-FDDF24E22541 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:cisco:telepresence_system_software:1.5.10:*:*:*:*:*:*:* (string)

matchCriteriaId : 27ECF70E-A6FE-4277-B02A-F0551271446B (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:cisco:telepresence_system_software:1.5.11:*:*:*:*:*:*:* (string)

matchCriteriaId : 68CC9A38-CA82-4558-BC92-0433301570E9 (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:cisco:telepresence_system_software:1.5.12:*:*:*:*:*:*:* (string)

matchCriteriaId : F74C1145-E2DC-41A5-ADD8-282332124C8A (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:a:cisco:telepresence_system_software:1.5.13:*:*:*:*:*:*:* (string)

matchCriteriaId : B1CB7370-5367-4C3E-9B0E-88A29E1E8704 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:cisco:telepresence_system_3000:*:*:*:*:*:*:*:* (string)

matchCriteriaId : DC14CB1A-DE5C-4877-8FFB-DF2FA1ADE176 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

2 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:cisco:telepresence_system_software:1.5.10:*:*:*:*:*:*:* (string)

matchCriteriaId : 27ECF70E-A6FE-4277-B02A-F0551271446B (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:cisco:telepresence_system_software:1.5.11:*:*:*:*:*:*:* (string)

matchCriteriaId : 68CC9A38-CA82-4558-BC92-0433301570E9 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:cisco:telepresence_system_software:1.5.12:*:*:*:*:*:*:* (string)

matchCriteriaId : F74C1145-E2DC-41A5-ADD8-282332124C8A (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:cisco:telepresence_system_software:1.5.13:*:*:*:*:*:*:* (string)

matchCriteriaId : B1CB7370-5367-4C3E-9B0E-88A29E1E8704 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:cisco:telepresence_system_1300_series:*:*:*:*:*:*:*:* (string)

matchCriteriaId : B6D3C3AC-464F-4BCB-B3FF-CE4718156109 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

3 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:cisco:telepresence_system_software:1.4.7:*:*:*:*:*:*:* (string)

matchCriteriaId : 31487AA7-257C-4216-B5E5-6244FF06D00A (string)

vulnerable : false (boolean)

}

1 : { »

criteria : cpe:2.3:a:cisco:telepresence_system_software:1.5.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 4062C260-C7B5-40E4-B77E-5AC1BFDB303D (string)

vulnerable : false (boolean)

}

2 : { »

criteria : cpe:2.3:a:cisco:telepresence_system_software:1.5.3:*:*:*:*:*:*:* (string)

matchCriteriaId : 4B9FF632-4F67-4D04-A7D9-FDDF24E22541 (string)

vulnerable : false (boolean)

}

3 : { »

criteria : cpe:2.3:a:cisco:telepresence_system_software:1.5.10:*:*:*:*:*:*:* (string)

matchCriteriaId : 27ECF70E-A6FE-4277-B02A-F0551271446B (string)

vulnerable : false (boolean)

}

4 : { »

criteria : cpe:2.3:a:cisco:telepresence_system_software:1.5.11:*:*:*:*:*:*:* (string)

matchCriteriaId : 68CC9A38-CA82-4558-BC92-0433301570E9 (string)

vulnerable : false (boolean)

}

5 : { »

criteria : cpe:2.3:a:cisco:telepresence_system_software:1.5.12:*:*:*:*:*:*:* (string)

matchCriteriaId : F74C1145-E2DC-41A5-ADD8-282332124C8A (string)

vulnerable : false (boolean)

}

6 : { »

criteria : cpe:2.3:a:cisco:telepresence_system_software:1.5.13:*:*:*:*:*:*:* (string)

matchCriteriaId : B1CB7370-5367-4C3E-9B0E-88A29E1E8704 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:cisco:telepresence_system_3200_series:*:*:*:*:*:*:*:* (string)

matchCriteriaId : B9CB2EA2-9BC8-4FFD-B79C-0887D65B082B (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

4 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:cisco:telepresence_system_software:1.4.7:*:*:*:*:*:*:* (string)

matchCriteriaId : 31487AA7-257C-4216-B5E5-6244FF06D00A (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:cisco:telepresence_system_software:1.5.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 4062C260-C7B5-40E4-B77E-5AC1BFDB303D (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:cisco:telepresence_system_software:1.5.3:*:*:*:*:*:*:* (string)

matchCriteriaId : 4B9FF632-4F67-4D04-A7D9-FDDF24E22541 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:cisco:telepresence_system_software:1.5.10:*:*:*:*:*:*:* (string)

matchCriteriaId : 27ECF70E-A6FE-4277-B02A-F0551271446B (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:cisco:telepresence_system_software:1.5.11:*:*:*:*:*:*:* (string)

matchCriteriaId : 68CC9A38-CA82-4558-BC92-0433301570E9 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:cisco:telepresence_system_software:1.5.12:*:*:*:*:*:*:* (string)

matchCriteriaId : F74C1145-E2DC-41A5-ADD8-282332124C8A (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:cisco:telepresence_system_software:1.5.13:*:*:*:*:*:*:* (string)

matchCriteriaId : B1CB7370-5367-4C3E-9B0E-88A29E1E8704 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:cisco:telepresence_system_500_series:*:*:*:*:*:*:*:* (string)

matchCriteriaId : F04D64C3-9105-49CD-8CED-E802E348ECF0 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : The XML-RPC implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote attackers to execute arbitrary commands via a TCP request, related to a "command injection vulnerability," aka Bug ID CSCtb52587. (string)

}

1 : { »

lang : es (string)

value : La implementación XML-RPC en dispositivos Cisco TelePresence endpoint con software v1.2.x hasta v1.5.x permite a atacantes remotos ejecutar código arbitrario mediante una petición TCP, relacionado con una "vulnerabilidad de inyección de comandos", también conocido como error ID CSCtb52587. (string)

}

]

id : CVE-2011-0378 (string)

lastModified : 2025-04-11T00:51:21.963 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : HIGH (string)

cvssData : { »

accessComplexity : LOW (string)

accessVector : ADJACENT_NETWORK (string)

authentication : NONE (string)

availabilityImpact : COMPLETE (string)

baseScore : 8.3 (number)

confidentialityImpact : COMPLETE (string)

integrityImpact : COMPLETE (string)

vectorString : AV:A/AC:L/Au:N/C:C/I:C/A:C (string)

version : 2.0 (string)

}

exploitabilityScore : 6.5 (number)

impactScore : 10 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

}

published : 2011-02-25T12:00:18.307 (string)

references : [ »

0 : { »

source : psirt@cisco.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e152.shtml (string)

}

1 : { »

source : psirt@cisco.com (string)

url : http://www.securitytracker.com/id?1025112 (string)

}

2 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e152.shtml (string)

}

3 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

url : http://www.securitytracker.com/id?1025112 (string)

}

]

sourceIdentifier : psirt@cisco.com (string)

vulnStatus : Deferred (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-78 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Access Vector Adjacent Network

Access Complexity Low

Authentication None

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

Affected Vendors & Products

Metrics

Access Vector Adjacent Network

Access Complexity Low

Authentication None

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object