Vulnerability CVE-2011-0384 - CERT Civis.Net

Vulnerability Name:

CVE-2011-0384 (CCN-65620)

Assigned:

2011-02-23

Published:

2011-02-23

Updated:

2017-08-17

Summary:

The Java Servlet framework on Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x does not require administrative authentication for unspecified actions, which allows remote attackers to execute arbitrary code via a crafted request, aka Bug ID CSCtf01253.

CVSS v3 Severity:

10.0 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Changed
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): High

CVSS v2 Severity:

10.0 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C)
7.4 High (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

10.0 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C)
7.4 High (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

Vulnerability Type:

Vulnerability Consequences:

Gain Access

References:

Source: MITRE
Type: CNA
CVE-2011-0384

Source: CCN
Type: SA43488
Cisco ASA 5500 Series Multiple Vulnerabilities

Source: CCN
Type: cisco-sa-20110223-telepresence-ctms
Multiple Vulnerabilities in Cisco TelePresence Multipoint Switch

Source: CISCO
Type: Vendor Advisory
20110223 Multiple Vulnerabilities in Cisco TelePresence Multipoint Switch

Source: CCN
Type: OSVDB ID: 72599
Cisco TelePresence Java Servlet Framework Crafted Request Unauthenticated Command Execution (2011-0384)

Source: BID
Type: UNKNOWN
46520

Source: CCN
Type: BID-46520
Cisco TelePresence Multipoint Switch Multiple Vulnerabilities

Source: SECTRACK
Type: UNKNOWN
1025113

Source: XF
Type: UNKNOWN
cisco-switch-java-unauth-access(65620)

Source: XF
Type: UNKNOWN
cisco-switch-java-unauth-access(65620)

Vulnerable Configuration:

Configuration 1:

cpe:/a:cisco:telepresence_multipoint_switch_software:1.0.4.0:*:*:*:*:*:*:*

OR cpe:/a:cisco:telepresence_multipoint_switch_software:1.1.0:*:*:*:*:*:*:*

OR cpe:/a:cisco:telepresence_multipoint_switch_software:1.1.1:*:*:*:*:*:*:*

OR cpe:/a:cisco:telepresence_multipoint_switch_software:1.1.2:*:*:*:*:*:*:*

OR cpe:/a:cisco:telepresence_multipoint_switch_software:1.5.0:*:*:*:*:*:*:*

OR cpe:/a:cisco:telepresence_multipoint_switch_software:1.5.1:*:*:*:*:*:*:*

OR cpe:/a:cisco:telepresence_multipoint_switch_software:1.5.2:*:*:*:*:*:*:*

OR cpe:/a:cisco:telepresence_multipoint_switch_software:1.5.3:*:*:*:*:*:*:*

OR cpe:/a:cisco:telepresence_multipoint_switch_software:1.5.4:*:*:*:*:*:*:*

OR cpe:/a:cisco:telepresence_multipoint_switch_software:1.5.5:*:*:*:*:*:*:*

OR cpe:/a:cisco:telepresence_multipoint_switch_software:1.5.6:*:*:*:*:*:*:*

OR cpe:/a:cisco:telepresence_multipoint_switch_software:1.6.0:*:*:*:*:*:*:*

OR cpe:/a:cisco:telepresence_multipoint_switch_software:1.6.1:*:*:*:*:*:*:*

OR cpe:/a:cisco:telepresence_multipoint_switch_software:1.6.2:*:*:*:*:*:*:*

OR cpe:/a:cisco:telepresence_multipoint_switch_software:1.6.3:*:*:*:*:*:*:*

OR cpe:/a:cisco:telepresence_multipoint_switch_software:1.6.4:*:*:*:*:*:*:*

AND

cpe:/h:cisco:telepresence_multipoint_switch:*:*:*:*:*:*:*:*

Denotes that component is vulnerable