Cisco Unified Videoconferencing System 5110 Firmware vulnerabilities

6 CVEs affecting Cisco Unified Videoconferencing System 5110 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2010-4305, published 2010-11-22.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2010-3038, published 2010-11-22. High severity, CVSS 10.0. EPSS: 3.3% chance of exploitation in the next 30 days. Cisco Unified Videoconferencing (UVC) System 5110 and 5115, when the Linux operating system is used, has a default password for the (1) root, (2) cs, and (3) develop accounts, which makes it easier…
CVE-2010-3037, published 2010-11-22. High severity, CVSS 8.5. EPSS: 2.9% chance of exploitation in the next 30 days. goform/websXMLAdminRequestCgi.cgi in Cisco Unified Videoconferencing (UVC) System 5110 and 5115, and possibly Unified Videoconferencing System 3545 and 5230, Unified Videoconferencing 3527 Primary…
CVE-2010-4305, published 2010-11-22. Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days. Cisco Unified Videoconferencing (UVC) System 3545, 5110, 5115, and 5230; Unified Videoconferencing 3527 Primary Rate Interface (PRI) Gateway; Unified Videoconferencing 3522 Basic Rate Interfaces…
CVE-2010-4304, published 2010-11-22. Medium severity, CVSS 6.4. EPSS: 1.2% chance of exploitation in the next 30 days. The web interface in Cisco Unified Videoconferencing (UVC) System 3545, 5110, 5115, and 5230; Unified Videoconferencing 3527 Primary Rate Interface (PRI) Gateway; Unified Videoconferencing 3522 Basic…
CVE-2010-4303, published 2010-11-22. Medium severity, CVSS 4.9. EPSS: 0.3% chance of exploitation in the next 30 days. Cisco Unified Videoconferencing (UVC) System 5110 and 5115, when the Linux operating system is used, uses world-readable permissions for the /etc/shadow file, which allows local users to discover…
CVE-2010-4302, published 2010-11-22. Medium severity, CVSS 4.9. EPSS: 0.3% chance of exploitation in the next 30 days. /opt/rv/Versions/CurrentVersion/Mcu/Config/Mcu.val in Cisco Unified Videoconferencing (UVC) System 5110 and 5115, when the Linux operating system is used, uses a weak hashing algorithm for the (1)…