Описание
Cisco TelePresence Manager 1.2.x through 1.6.x allows remote attackers to perform unspecified actions and consequently execute arbitrary code via a crafted request to the Java RMI interface, related to a "command injection vulnerability," aka Bug ID CSCtf97085.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:cisco:telepresence_manager:1.2.0.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_manager:1.3.2:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_manager:1.4.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_manager:1.5.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_manager:1.5.2:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_manager:1.6.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_manager:1.6.2:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_manager:1.6.3:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_manager:1.6.5:*:*:*:*:*:*:*
EPSS
Процентиль: 85%
0.02493
Низкий
10 Critical
CVSS2
Дефекты
CWE-78
Связанные уязвимости
github
больше 3 лет назад
Cisco TelePresence Manager 1.2.x through 1.6.x allows remote attackers to perform unspecified actions and consequently execute arbitrary code via a crafted request to the Java RMI interface, related to a "command injection vulnerability," aka Bug ID CSCtf97085.
EPSS
Процентиль: 85%
0.02493
Низкий
10 Critical
CVSS2
Дефекты
CWE-78