Vulnerability Details CVE-2011-0354
The default configuration of Cisco Tandberg C Series Endpoints, and Tandberg E and EX Personal Video units, with software before TC4.0.0 has a blank password for the root account, which makes it easier for remote attackers to obtain access via an unspecified login method.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.086
EPSS Ranking 92.0%
CVSS Severity
CVSS v2 Score 10.0
References
- http://secunia.com/advisories/43158
- http://securityreason.com/securityalert/8060
- http://securitytracker.com/id?1025017
- http://tools.cisco.com/security/center/viewAlert.x?alertId=22314
- http://www.cisco.com/en/US/products/ps11422/products_security_advisory09186a0080b69541.shtml
- http://www.exploit-db.com/exploits/16100
- http://www.kb.cert.org/vuls/id/436854
- http://www.securityfocus.com/bid/46107
- http://secunia.com/advisories/43158
- http://securityreason.com/securityalert/8060
- http://securitytracker.com/id?1025017
- http://tools.cisco.com/security/center/viewAlert.x?alertId=22314
- http://www.cisco.com/en/US/products/ps11422/products_security_advisory09186a0080b69541.shtml
- http://www.exploit-db.com/exploits/16100
- http://www.kb.cert.org/vuls/id/436854
- http://www.securityfocus.com/bid/46107
Products affected by CVE-2011-0354
-
cpe:2.3:a:cisco:tandberg_endpoint:*
-
cpe:2.3:a:cisco:tandberg_endpoint:tc2.1.2
-
cpe:2.3:a:cisco:tandberg_endpoint:tc3.0.0
-
cpe:2.3:a:cisco:tandberg_endpoint:tc3.1.0
-
cpe:2.3:a:cisco:tandberg_endpoint:tc3.1.1
-
cpe:2.3:a:cisco:tandberg_endpoint:tc3.1.2
-
cpe:2.3:a:cisco:tandberg_personal_video_unit_software:*
-
cpe:2.3:a:cisco:tandberg_personal_video_unit_software:tc3.1.0
-
cpe:2.3:a:cisco:tandberg_personal_video_unit_software:tc3.1.1
-
cpe:2.3:a:cisco:tandberg_personal_video_unit_software:tc3.1.2
-
cpe:2.3:a:cisco:tandberg_personal_video_unit_software:te1.0.1
-
cpe:2.3:a:cisco:tandberg_personal_video_unit_software:te2.2.0
-
cpe:2.3:h:cisco:tandberg_endpoint:c20
-
cpe:2.3:h:cisco:tandberg_endpoint:c40
-
cpe:2.3:h:cisco:tandberg_endpoint:c60
-
cpe:2.3:h:cisco:tandberg_endpoint:c90
-
cpe:2.3:h:cisco:tandberg_personal_video_unit:e20
-
cpe:2.3:h:cisco:tandberg_personal_video_unit:ex60
-
cpe:2.3:h:cisco:tandberg_personal_video_unit:ex90