CVE-2011-0372: OS Command Injection
The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote attackers to execute arbitrary commands via a malformed request, related to "command injection vulnerabilities," aka Bug ID CSCtb31640.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-0372?
CVE-2011-0372 has been classified as a high-severity vulnerability due to its potential for remote command execution.
How do I fix CVE-2011-0372?
To mitigate CVE-2011-0372, upgrade your Cisco TelePresence endpoint devices to the latest patched version that addresses this vulnerability.
What devices are affected by CVE-2011-0372?
CVE-2011-0372 affects various models of Cisco TelePresence endpoint devices running software versions 1.2.x through 1.5.x.
Can CVE-2011-0372 be exploited remotely?
Yes, CVE-2011-0372 can be exploited by remote attackers through a specially crafted request.
What are the potential consequences of CVE-2011-0372?
Exploiting CVE-2011-0372 could allow attackers to execute arbitrary commands on the affected Cisco TelePresence devices.