CyberSec.Space Logo
Back to CVE Browser

CVE-2011-0388

HIGH
7.8
CVSS Severity Score
EPSS Score0.0270%
EPSS Percentile20.83th
PublishedFeb 25, 2011
Last ModifiedApr 29, 2026

Vulnerability Description

Cisco TelePresence Recording Server devices with software 1.6.x and Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x do not properly restrict remote access to the Java servlet RMI interface, which allows remote attackers to cause a denial of service (memory consumption and web outage) via multiple crafted requests, aka Bug IDs CSCtg35830 and CSCtg35825.

Affected Platforms (CPE)

📦
Cisco

Telepresence Recording Server Software

= 1.6.1
📦
Cisco

Telepresence Recording Server Software

= 1.6.2
📦
Cisco

Telepresence Recording Server Software

= 1.6.3
🔌
Cisco

Telepresence Recording Server

All versions
📦
Cisco

Telepresence Multipoint Switch Software

= 1.0.4.0
📦
Cisco

Telepresence Multipoint Switch Software

= 1.1.0
📦
Cisco

Telepresence Multipoint Switch Software

= 1.1.1
📦
Cisco

Telepresence Multipoint Switch Software

= 1.1.2
📦
Cisco

Telepresence Multipoint Switch Software

= 1.5.0
📦
Cisco

Telepresence Multipoint Switch Software

= 1.5.1
📦
Cisco

Telepresence Multipoint Switch Software

= 1.5.2
📦
Cisco

Telepresence Multipoint Switch Software

= 1.5.3
📦
Cisco

Telepresence Multipoint Switch Software

= 1.5.4
📦
Cisco

Telepresence Multipoint Switch Software

= 1.5.5
📦
Cisco

Telepresence Multipoint Switch Software

= 1.5.6
📦
Cisco

Telepresence Multipoint Switch Software

= 1.6.0
📦
Cisco

Telepresence Multipoint Switch Software

= 1.6.1
📦
Cisco

Telepresence Multipoint Switch Software

= 1.6.2
📦
Cisco

Telepresence Multipoint Switch Software

= 1.6.3
📦
Cisco

Telepresence Multipoint Switch Software

= 1.6.4
🔌
Cisco

Telepresence Multipoint Switch

All versions

References & Advisories

🔗 http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e11d.shtml
🔗 http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e14e.shtml
🔗 http://www.securityfocus.com/bid/46523
🔗 http://www.securitytracker.com/id?1025113
🔗 http://www.securitytracker.com/id?1025114
🔗 http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e11d.shtml
🔗 http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e14e.shtml
🔗 http://www.securityfocus.com/bid/46523

Related Vulnerabilities

CVE-2011-038210.0

The CGI subsystem on Cisco TelePresence Recording Server devices with software 1.6.x before 1.6.2 allows remote attackers to execu...

CVE-2011-038310.0

The Java Servlet framework on Cisco TelePresence Recording Server devices with software 1.6.x before 1.6.2 and Cisco TelePresence ...

CVE-2011-038510.0

The administrative web interface on Cisco TelePresence Recording Server devices with software 1.6.x and Cisco TelePresence Multipo...

CVE-2011-03869.3

The XML-RPC implementation on Cisco TelePresence Recording Server devices with software 1.6.x and 1.7.x before 1.7.1 allows remote...