Cisco TelePresence Endpoint Devices Multiple Vulnerabilities

Bugtraq ID:	46517
Class:	Unknown
CVE:	CVE-2011-0372 CVE-2011-0373 CVE-2011-0374 CVE-2011-0375 CVE-2011-0376 CVE-2011-0377 CVE-2011-0378
Remote:	Yes
Local:	No
Published:	Feb 23 2011 12:00AM
Updated:	Feb 23 2011 12:00AM
Credit:	Cisco
Vulnerable:	Cisco TelePresence Endpoint 1.5 Cisco TelePresence Endpoint 1.4 Cisco TelePresence Endpoint 1.3 Cisco TelePresence Endpoint 1.2
Not Vulnerable:	Cisco TelePresence Endpoint 1.7.1

Cisco TelePresence Endpoint Devices Multiple Vulnerabilities

Cisco TelePresence endpoint devices are prone to multiple vulnerabilities.

An attacker can exploit these issues to execute arbitrary commands, disclose potentially sensitive information, or cause denial-of-service conditions.

Cisco TelePresence Endpoint Devices Multiple Vulnerabilities

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Some of these issues may be trivial to exploit and may not require specific exploit code.

Cisco TelePresence Endpoint Devices Multiple Vulnerabilities

Solution:
Vendor updates are available. Please see the referenced advisory for details.

Cisco TelePresence Endpoint Devices Multiple Vulnerabilities

References:

• Cisco Homepage (Cisco)
  
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco TelePresence Endpoint (Cisco)