CVE-2016-1387
Summary
| CVE | CVE-2016-1387 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2016-05-05 21:59:00 UTC |
| Updated | 2016-12-01 03:05:00 UTC |
| Description | The XML API in TelePresence Codec (TC) 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.3.2, 7.3.3, 7.3.4, and 7.3.5 and Collaboration Endpoint (CE) 8.0.0, 8.0.1, and 8.1.0 in Cisco TelePresence Software mishandles authentication, which allows remote attackers to execute control commands or make configuration changes via an API request, aka Bug ID CSCuz26935. |
Risk And Classification
Problem Types: CWE-287
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Cisco | Telepresence Tc Software | 7.2.0 | All | All | All |
| Application | Cisco | Telepresence Tc Software | 7.2.1 | All | All | All |
| Application | Cisco | Telepresence Tc Software | 7.3.0 | All | All | All |
| Application | Cisco | Telepresence Tc Software | 7.3.1 | All | All | All |
| Application | Cisco | Telepresence Tc Software | 7.3.2 | All | All | All |
| Application | Cisco | Telepresence Tc Software | 7.3.3 | All | All | All |
| Application | Cisco | Telepresence Tc Software | 7.2.0 | All | All | All |
| Application | Cisco | Telepresence Tc Software | 7.2.1 | All | All | All |
| Application | Cisco | Telepresence Tc Software | 7.3.0 | All | All | All |
| Application | Cisco | Telepresence Tc Software | 7.3.1 | All | All | All |
| Application | Cisco | Telepresence Tc Software | 7.3.2 | All | All | All |
| Application | Cisco | Telepresence Tc Software | 7.3.3 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Cisco TelePresence Codec and Collaboration Endpoint XML API Bug Lets Remote Users Bypass Authentication on the Target System - SecurityTracker | SECTRACK | www.securitytracker.com | |
| Cisco TelePresence XML Application Programming Interface Authentication Bypass Vulnerability | CISCO | tools.cisco.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.