Description
The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote authenticated users to execute arbitrary commands via a malformed request, related to "command injection vulnerabilities," aka Bug ID CSCtb31659.
Affected products
- Cisco / telepresence_system_1000
- Cisco / telepresence_system_1100
- Cisco / telepresence_system_1300_series
- Cisco / telepresence_system_3000
- Cisco / telepresence_system_3200_series
- Cisco / telepresence_system_500_series
- Cisco / telepresence_system_software1.5.11 – 1.5.11
- Cisco / telepresence_system_software1.2.3 – 1.2.3
- Cisco / telepresence_system_software1.5.13 – 1.5.13
- Cisco / telepresence_system_software1.5.12 – 1.5.12
- Cisco / telepresence_system_software1.3.2 – 1.3.2
- Cisco / telepresence_system_software1.4.7 – 1.4.7
- Cisco / telepresence_system_software1.5.1 – 1.5.1
- Cisco / telepresence_system_software1.5.3 – 1.5.3
- Cisco / telepresence_system_software1.5.10 – 1.5.10