Vulnerability in Cisco Telepresence System 1300
CVE-2013-3454
Cisco TelePresence System Software 1.10.1 and earlier on 500, 13X0, 1X00, 30X0, and 3X00 devices, and 6.0.3 and earlier on TX 9X00 devices, has a default password for the pwrecovery account, which makes it easier for remote attackers to modify the configuration or perform arbitrary actions via HTTPS requests, aka Bug ID CSCui43128.
EPSS: 0.021 (80.4th percentile) — read the EPSS interpretation.
Affected products
- Cisco Telepresence_system_1300
- Cisco Telepresence_system_1300-65
- Cisco Telepresence_system_3000
- Cisco Telepresence_system_3010
- Cisco Telepresence_system_3200
- Cisco Telepresence_system_3210
- Cisco Telepresence_system_500-32
- Cisco Telepresence_system_500-37
- Cisco Telepresence_system_software — versions 1.9.1(68), 1.7.0.1(4764), 1.6.7(4212)
- Cisco Telepresence_system_tx9000
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)