CyberSec.Space Logo
Back to CVE Browser

CVE-2011-0385

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.1410%
EPSS Percentile23.12th
PublishedFeb 25, 2011
Last ModifiedApr 29, 2026

Vulnerability Description

The administrative web interface on Cisco TelePresence Recording Server devices with software 1.6.x and Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x allows remote attackers to create or overwrite arbitrary files, and possibly execute arbitrary code, via a crafted request, aka Bug IDs CSCth85786 and CSCth61065.

Affected Platforms (CPE)

📦
Cisco

Telepresence Recording Server Software

= 1.6.1
📦
Cisco

Telepresence Recording Server Software

= 1.6.2
📦
Cisco

Telepresence Recording Server Software

= 1.6.3
🔌
Cisco

Telepresence Recording Server

All versions
📦
Cisco

Telepresence Multipoint Switch Software

= 1.0.4.0
📦
Cisco

Telepresence Multipoint Switch Software

= 1.1.0
📦
Cisco

Telepresence Multipoint Switch Software

= 1.1.1
📦
Cisco

Telepresence Multipoint Switch Software

= 1.1.2
📦
Cisco

Telepresence Multipoint Switch Software

= 1.5.0
📦
Cisco

Telepresence Multipoint Switch Software

= 1.5.1
📦
Cisco

Telepresence Multipoint Switch Software

= 1.5.2
📦
Cisco

Telepresence Multipoint Switch Software

= 1.5.3
📦
Cisco

Telepresence Multipoint Switch Software

= 1.5.4
📦
Cisco

Telepresence Multipoint Switch Software

= 1.5.5
📦
Cisco

Telepresence Multipoint Switch Software

= 1.5.6
📦
Cisco

Telepresence Multipoint Switch Software

= 1.6.0
📦
Cisco

Telepresence Multipoint Switch Software

= 1.6.1
📦
Cisco

Telepresence Multipoint Switch Software

= 1.6.2
📦
Cisco

Telepresence Multipoint Switch Software

= 1.6.3
📦
Cisco

Telepresence Multipoint Switch Software

= 1.6.4
🔌
Cisco

Telepresence Multipoint Switch

All versions

References & Advisories

🔗 http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e11d.shtml
🔗 http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e14e.shtml
🔗 http://www.securitytracker.com/id?1025113
🔗 http://www.securitytracker.com/id?1025114
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/65604
🔗 http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e11d.shtml
🔗 http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e14e.shtml
🔗 http://www.securitytracker.com/id?1025113

Related Vulnerabilities

CVE-2011-038210.0

The CGI subsystem on Cisco TelePresence Recording Server devices with software 1.6.x before 1.6.2 allows remote attackers to execu...

CVE-2011-038310.0

The Java Servlet framework on Cisco TelePresence Recording Server devices with software 1.6.x before 1.6.2 and Cisco TelePresence ...

CVE-2011-03869.3

The XML-RPC implementation on Cisco TelePresence Recording Server devices with software 1.6.x and 1.7.x before 1.7.1 allows remote...

CVE-2011-03887.8

Cisco TelePresence Recording Server devices with software 1.6.x and Cisco TelePresence Multipoint Switch (CTMS) devices with softw...