CVE-2011-4659

Cisco TelePresence Software before TE 4.1.1 on the Cisco IP Video Phone E20 has a default password for the root account after an upgrade to TE 4.1.0, which makes it easier for remote attackers to modify the configuration via an SSH session, aka Bug ID CSCtw69889, a different vulnerability than CVE-2011-2555.

Score

CVSS 2.0 10.0 Critical

Status

Modified - psirt@cisco.com

Published

2012-01-19

Last modified

2024-09-17

Weaknesses

CWE-264

Affected products

• Ip Video Phone E20 (Cisco)
• Telepresence E20 Software (Cisco)

References

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120118-te