CVE-2011-4659
Summary
| CVE | CVE-2011-4659 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2012-01-19 15:55:00 UTC |
| Updated | 2012-02-10 05:00:00 UTC |
| Description | Cisco TelePresence Software before TE 4.1.1 on the Cisco IP Video Phone E20 has a default password for the root account after an upgrade to TE 4.1.0, which makes it easier for remote attackers to modify the configuration via an SSH session, aka Bug ID CSCtw69889, a different vulnerability than CVE-2011-2555. |
Risk And Classification
Problem Types: CWE-264
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Cisco | Ip Video Phone E20 | - | All | All | All |
| Hardware | Cisco | Ip Video Phone E20 | - | All | All | All |
| Application | Cisco | Telepresence E20 Software | te2.2 | All | All | All |
| Application | Cisco | Telepresence E20 Software | te2.2.1 | All | All | All |
| Application | Cisco | Telepresence E20 Software | te4.0.0 | All | All | All |
| Application | Cisco | Telepresence E20 Software | te4.1.0 | All | All | All |
| Application | Cisco | Telepresence E20 Software | te4.1.1 | All | All | All |
| Application | Cisco | Telepresence E20 Software | tenc4.0.0 | All | All | All |
| Application | Cisco | Telepresence E20 Software | tenc4.1.0 | All | All | All |
| Application | Cisco | Telepresence E20 Software | tenc4.1.1 | All | All | All |
| Application | Cisco | Telepresence E20 Software | tenc4.1.1-cucm | All | All | All |
| Application | Cisco | Telepresence E20 Software | te2.2 | All | All | All |
| Application | Cisco | Telepresence E20 Software | te2.2.1 | All | All | All |
| Application | Cisco | Telepresence E20 Software | te4.0.0 | All | All | All |
| Application | Cisco | Telepresence E20 Software | te4.1.0 | All | All | All |
| Application | Cisco | Telepresence E20 Software | te4.1.1 | All | All | All |
| Application | Cisco | Telepresence E20 Software | tenc4.0.0 | All | All | All |
| Application | Cisco | Telepresence E20 Software | tenc4.1.0 | All | All | All |
| Application | Cisco | Telepresence E20 Software | tenc4.1.1 | All | All | All |
| Application | Cisco | Telepresence E20 Software | tenc4.1.1-cucm | All | All | All |
| Application | Cisco | Telepresence E20 Software | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Cisco Security Advisory: Cisco IP Video Phone E20 Default Root Account | CISCO | tools.cisco.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.