CVE-2011-0384

Published: Feb 25, 2011Modified: Apr 29, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

The Java Servlet framework on Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x does not require administrative authentication for unspecified actions, which allows remote attackers to execute arbitrary code via a crafted request, aka Bug ID CSCtf01253.

Affected (17)

Products: Cisco: Telepresence Multipoint Switch Software, Telepresence Multipoint Switch

Cisco

2 products

Telepresence Multipoint Switch Software

Telepresence Multipoint Switch

Configuration A

17 vulnerable

Vulnerable Software	Affected Versions
Cisco Telepresence Multipoint Switch Software	Version 1.0.4.0
Cisco Telepresence Multipoint Switch Software	Version 1.1.0
Cisco Telepresence Multipoint Switch Software	Version 1.1.1
Cisco Telepresence Multipoint Switch Software	Version 1.1.2
Cisco Telepresence Multipoint Switch Software	Version 1.5.0
Cisco Telepresence Multipoint Switch Software	Version 1.5.1
Cisco Telepresence Multipoint Switch Software	Version 1.5.2
Cisco Telepresence Multipoint Switch Software	Version 1.5.3
Cisco Telepresence Multipoint Switch Software	Version 1.5.4
Cisco Telepresence Multipoint Switch Software	Version 1.5.5
Cisco Telepresence Multipoint Switch Software	Version 1.5.6
Cisco Telepresence Multipoint Switch Software	Version 1.6.0
Cisco Telepresence Multipoint Switch Software	Version 1.6.1
Cisco Telepresence Multipoint Switch Software	Version 1.6.2
Cisco Telepresence Multipoint Switch Software	Version 1.6.3
Cisco Telepresence Multipoint Switch Software	Version 1.6.4
Cisco Telepresence Multipoint Switch	All versions