Vulnerability in Cisco Tandberg Endpoint
CVE-2011-0354
The default configuration of Cisco Tandberg C Series Endpoints, and Tandberg E and EX Personal Video units, with software before TC4.0.0 has a blank password for the root account, which makes it easier for remote attackers to obtain access via an unspecified login method.
EPSS: 0.140 (96.2th percentile) — read the EPSS interpretation.
Affected products
- Cisco Tandberg_endpoint — versions tc2.1.2, tc3.0.0, tc3.1.0
- Cisco Tandberg_personal_video_unit — versions ex90, e20, ex60
- Cisco Tandberg_personal_video_unit_software — versions tc3.1.0, tc3.1.1, tc3.1.2
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)
- psirt@cisco.com (x_refsource_CONFIRM)
- psirt@cisco.com (x_refsource_SREASON, third-party-advisory)
- psirt@cisco.com (vdb-entry, x_refsource_BID)
- psirt@cisco.com (US Government Resource, x_refsource_CERT-VN, third-party-advisory)
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
- psirt@cisco.com (exploit, x_refsource_EXPLOIT-DB)
- psirt@cisco.com (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)