Back to CVE Browser

CVE-2011-0382

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0890%

EPSS Percentile11.26th

PublishedFeb 25, 2011

Last ModifiedApr 29, 2026

Vulnerability Description

The CGI subsystem on Cisco TelePresence Recording Server devices with software 1.6.x before 1.6.2 allows remote attackers to execute arbitrary commands via a request to TCP port 443, related to a "command injection vulnerability," aka Bug ID CSCtf97221.

Affected Platforms (CPE)

📦

Cisco

Telepresence Recording Server Software

= 1.6.1

🔌

Cisco

Telepresence Recording Server

All versions

References & Advisories

🔗 http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e11d.shtml

🔗 http://www.securityfocus.com/bid/46522

🔗 http://www.securitytracker.com/id?1025114

🔗 http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e11d.shtml

🔗 http://www.securityfocus.com/bid/46522

🔗 http://www.securitytracker.com/id?1025114

Related Vulnerabilities

CVE-2011-038310.0

The Java Servlet framework on Cisco TelePresence Recording Server devices with software 1.6.x before 1.6.2 and Cisco TelePresence ...

CVE-2011-038510.0

The administrative web interface on Cisco TelePresence Recording Server devices with software 1.6.x and Cisco TelePresence Multipo...

CVE-2011-03869.3

The XML-RPC implementation on Cisco TelePresence Recording Server devices with software 1.6.x and 1.7.x before 1.7.1 allows remote...

CVE-2011-03887.8

Cisco TelePresence Recording Server devices with software 1.6.x and Cisco TelePresence Multipoint Switch (CTMS) devices with softw...