CVE-2011-0383: Critical severity cisco telepresence recording server vulnerability
The Java Servlet framework on Cisco TelePresence Recording Server devices with software 1.6.x before 1.6.2 and Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x does not require administrative authentication for unspecified actions, which allows remote attackers to execute arbitrary code via a crafted request, aka Bug IDs CSCtf42005 and CSCtf42008.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-0383?
CVE-2011-0383 is rated as high severity due to the potential for unauthorized access to administrative functions.
How do I fix CVE-2011-0383?
To fix CVE-2011-0383, upgrade Cisco TelePresence Recording Server and Multipoint Switch software to the latest versions provided by Cisco.
What devices are affected by CVE-2011-0383?
CVE-2011-0383 affects Cisco TelePresence Recording Server and Multipoint Switch devices running specified versions prior to the latest updates.
What actions are not authenticated in CVE-2011-0383?
CVE-2011-0383 does not require administrative authentication for unspecified actions, allowing remote users to potentially exploit the system.
When was CVE-2011-0383 disclosed?
CVE-2011-0383 was disclosed in January 2011, highlighting vulnerabilities in older versions of Cisco's telepresence systems.