Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
10.0

Cisco TelePresence Recording Server admin password allows remote config changes

CVE-2011-2555 · published 15 years ago
Summary

Versions of Cisco TelePresence Recording Server 1.7.2 up to but not including 1.7.2.1 use a preset administrator password. This lets someone on the network log in remotely and change the system’s settings. Upgrade to version 1.7.2.1 or later and set a strong unique password, and limit remote access to trusted users.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
cisco telepresence_recording_server_software 1.7.2
cpe:2.3:a:cisco:telepresence_recording_server_software:1.7.2:*:*:*:*:*:*:*
Original advisory text
Cisco TelePresence Recording Server 1.7.2.x before 1.7.2.1 has a default password for the root administrator account, which makes it easier for remote attackers to modify the configuration via an S...
Cisco TelePresence Recording Server 1.7.2.x before 1.7.2.1 has a default password for the root administrator account, which makes it easier for remote attackers to modify the configuration via an SSH session, aka Bug ID CSCtr76182.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker full control (estimated)
Severity
10.0 Critical
Exploitation
3% chance of attack within 30 days
Type
CWE-255Credentials Management Errors
Timeline
Published29 Aug 2011
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2011-2555 · NVD
Track software like this
Free during beta