Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
10.0

Cisco TelePresence devices let attackers add or replace files

CVE-2011-0385 · published 15 years ago
Summary

The web‑based admin page on certain Cisco TelePresence Recording Server and Multipoint Switch models can be tricked into writing files it should not. A remote attacker could place or change files and might even run their own code. Install the latest security updates from Cisco as soon as possible to close this gap.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
cisco telepresence_recording_server_software 1.6.1
1.6.2
1.6.3
cpe:2.3:a:cisco:telepresence_recording_server_software:1.6.1:*:*:*:*:*:*:*
cisco telepresence_recording_server All versions
cpe:2.3:h:cisco:telepresence_recording_server:*:*:*:*:*:*:*:*
cisco telepresence_multipoint_switch_software 1.0.4.0
1.1.0
1.1.1
1.1.2
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.6.0
4 more version ranges
cpe:2.3:a:cisco:telepresence_multipoint_switch_software:1.0.4.0:*:*:*:*:*:*:*
cisco telepresence_multipoint_switch All versions
cpe:2.3:h:cisco:telepresence_multipoint_switch:*:*:*:*:*:*:*:*
Original advisory text
The administrative web interface on Cisco TelePresence Recording Server devices with software 1.6.x and Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1....
The administrative web interface on Cisco TelePresence Recording Server devices with software 1.6.x and Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x allows remote attackers to create or overwrite arbitrary files, and possibly execute arbitrary code, via a crafted request, aka Bug IDs CSCth85786 and CSCth61065.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker full control (estimated)
Severity
10.0 Critical
Exploitation
5% chance of attack within 30 days
Timeline
Published25 Feb 2011
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2011-0385 · NVD
Track software like this
Free during beta