Cisco Telepresence Recording Server vulnerabilities

10 CVEs affecting Cisco Telepresence Recording Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2012-3076, published 2012-07-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2011-0383, published 2011-02-25. High severity, CVSS 10.0. EPSS: 6.5% chance of exploitation in the next 30 days. The Java Servlet framework on Cisco TelePresence Recording Server devices with software 1.6.x before 1.6.2 and Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x,…
CVE-2011-0385, published 2011-02-25. High severity, CVSS 10.0. EPSS: 5.2% chance of exploitation in the next 30 days. The administrative web interface on Cisco TelePresence Recording Server devices with software 1.6.x and Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and…
CVE-2011-0386, published 2011-02-25. High severity, CVSS 9.3. EPSS: 4.5% chance of exploitation in the next 30 days. The XML-RPC implementation on Cisco TelePresence Recording Server devices with software 1.6.x and 1.7.x before 1.7.1 allows remote attackers to overwrite files and consequently execute arbitrary code…
CVE-2011-0382, published 2011-02-25. High severity, CVSS 10.0. EPSS: 4.2% chance of exploitation in the next 30 days. The CGI subsystem on Cisco TelePresence Recording Server devices with software 1.6.x before 1.6.2 allows remote attackers to execute arbitrary commands via a request to TCP port 443, related to a…
CVE-2011-0388, published 2011-02-25. High severity, CVSS 7.8. EPSS: 2.6% chance of exploitation in the next 30 days. Cisco TelePresence Recording Server devices with software 1.6.x and Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x do not properly restrict remote…
CVE-2011-0391, published 2011-02-25. High severity, CVSS 7.8. EPSS: 2.6% chance of exploitation in the next 30 days. Cisco TelePresence Recording Server devices with software 1.6.x allow remote attackers to cause a denial of service (thread consumption and device outage) via a malformed request, related to an "ad…
CVE-2011-0392, published 2011-02-25. High severity, CVSS 7.5. EPSS: 2.4% chance of exploitation in the next 30 days. Cisco TelePresence Recording Server devices with software 1.6.x do not require authentication for an XML-RPC interface, which allows remote attackers to perform unspecified actions via a session on…
CVE-2012-3076, published 2012-07-12. High severity, CVSS 9.0. EPSS: 2.2% chance of exploitation in the next 30 days. The administrative web interface on Cisco TelePresence Recording Server before 1.8.0 allows remote authenticated users to execute arbitrary commands via unspecified vectors, aka Bug ID CSCth85804.
CVE-2012-3073, published 2012-07-12. High severity, CVSS 7.8. EPSS: 1.8% chance of exploitation in the next 30 days. The IP implementation on Cisco TelePresence Multipoint Switch before 1.8.1, Cisco TelePresence Manager before 1.9.0, and Cisco TelePresence Recording Server 1.8 and earlier allows remote attackers to…
CVE-2012-2486, published 2012-07-12. High severity, CVSS 8.3. EPSS: 1.7% chance of exploitation in the next 30 days. The Cisco Discovery Protocol (CDP) implementation on Cisco TelePresence Multipoint Switch before 1.9.0, Cisco TelePresence Immersive Endpoint Devices before 1.9.1, Cisco TelePresence Manager before…