Cisco Telepresence Recording Server Software vulnerabilities

8 CVEs affecting Cisco Telepresence Recording Server Software, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2011-2555, published 2011-08-29.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2011-0383, published 2011-02-25. High severity, CVSS 10.0. EPSS: 6.5% chance of exploitation in the next 30 days. The Java Servlet framework on Cisco TelePresence Recording Server devices with software 1.6.x before 1.6.2 and Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x,…
CVE-2011-0385, published 2011-02-25. High severity, CVSS 10.0. EPSS: 5.2% chance of exploitation in the next 30 days. The administrative web interface on Cisco TelePresence Recording Server devices with software 1.6.x and Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and…
CVE-2011-0386, published 2011-02-25. High severity, CVSS 9.3. EPSS: 4.5% chance of exploitation in the next 30 days. The XML-RPC implementation on Cisco TelePresence Recording Server devices with software 1.6.x and 1.7.x before 1.7.1 allows remote attackers to overwrite files and consequently execute arbitrary code…
CVE-2011-0382, published 2011-02-25. High severity, CVSS 10.0. EPSS: 4.2% chance of exploitation in the next 30 days. The CGI subsystem on Cisco TelePresence Recording Server devices with software 1.6.x before 1.6.2 allows remote attackers to execute arbitrary commands via a request to TCP port 443, related to a…
CVE-2011-2555, published 2011-08-29. High severity, CVSS 10.0. EPSS: 3.4% chance of exploitation in the next 30 days. Cisco TelePresence Recording Server 1.7.2.x before 1.7.2.1 has a default password for the root administrator account, which makes it easier for remote attackers to modify the configuration via an SSH…
CVE-2011-0388, published 2011-02-25. High severity, CVSS 7.8. EPSS: 2.6% chance of exploitation in the next 30 days. Cisco TelePresence Recording Server devices with software 1.6.x and Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x do not properly restrict remote…
CVE-2011-0391, published 2011-02-25. High severity, CVSS 7.8. EPSS: 2.6% chance of exploitation in the next 30 days. Cisco TelePresence Recording Server devices with software 1.6.x allow remote attackers to cause a denial of service (thread consumption and device outage) via a malformed request, related to an "ad…
CVE-2011-0392, published 2011-02-25. High severity, CVSS 7.5. EPSS: 2.4% chance of exploitation in the next 30 days. Cisco TelePresence Recording Server devices with software 1.6.x do not require authentication for an XML-RPC interface, which allows remote attackers to perform unspecified actions via a session on…