CVE-2011-4659: Cisco IP Video Phone e20

High severity, CVSS 10.0. EPSS: 1.9% chance of exploitation in the next 30 days.

Cisco TelePresence Software before TE 4.1.1 on the Cisco IP Video Phone E20 has a default password for the root account after an upgrade to TE 4.1.0, which makes it easier for remote attackers to modify the configuration via an SSH session, aka Bug ID CSCtw69889, a different vulnerability than CVE-2011-2555.

Affected products

• Cisco IP Video Phone e20
• Cisco Telepresence e20 Software: up to and including te4.1.1-cucm; version te2.2 only; version te2.2.1 only; version te4.0.0 only; version te4.1.0 only; version te4.1.1 only; …

Published 2012-01-19. Last modified 2026-06-16.