Vulnerability Name: | CVE-2012-3076 (CCN-76851) | ||||||||
Assigned: | 2012-07-11 | ||||||||
Published: | 2012-07-11 | ||||||||
Updated: | 2012-07-12 | ||||||||
Summary: | The administrative web interface on Cisco TelePresence Recording Server before 1.8.0 allows remote authenticated users to execute arbitrary commands via unspecified vectors, aka Bug ID CSCth85804. | ||||||||
CVSS v3 Severity: | 9.0 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H)
| ||||||||
CVSS v2 Severity: | 9.0 High (CVSS v2 Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C) 6.7 Medium (Temporal CVSS v2 Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C/E:U/RL:OF/RC:C)
6.7 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C/E:U/RL:OF/RC:C)
| ||||||||
Vulnerability Type: | CWE-78 | ||||||||
Vulnerability Consequences: | Gain Access | ||||||||
References: | Source: MITRE Type: CNA CVE-2012-3076 Source: CCN Type: SA49864 Cisco TelePresence Recording Server Two Vulnerabilities Source: CCN Type: cisco-sa-20120711-ctrs Multiple Vulnerabilities in Cisco TelePresence Recording Server Source: CISCO Type: Vendor Advisory 20120711 Multiple Vulnerabilities in Cisco TelePresence Recording Server Source: CCN Type: OSVDB ID: 83729 Cisco TelePresence Recording Server Admin Web Interface Malformed Request Parsing Remote Command Execution Source: CCN Type: BID-54384 Multiple Cisco Products Remote Code Execution Vulnerability Source: CCN Type: BID-54385 Cisco TelePresence Recording Server Web Interface Remote Command Injection Vulnerability Source: XF Type: UNKNOWN cisco-telepresence-command-exec(76851) | ||||||||
Vulnerable Configuration: | Configuration 1: Configuration CCN 1: Denotes that component is vulnerable | ||||||||
BACK |