CVE-2011-0383

no score yetEPSS 6.5%

The Java Servlet framework on Cisco TelePresence Recording Server devices with software 1.6.x before 1.6.2 and Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x does not require administrative authentication for unspecified actions, which allows remote attackers to execute arbitrary code via a crafted request, aka Bug IDs CSCtf42005 and CSCtf42008.

EPSS: 6.5% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)
CWE: CWE-287
Published: 2011-02-25
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

cisco:telepresence_multipoint_switch
cisco:telepresence_multipoint_switch_software
cisco:telepresence_recording_server
cisco:telepresence_recording_server_software

References

http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e11d.shtml
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e14e.shtml
http://www.securityfocus.com/bid/46519
http://www.securitytracker.com/id?1025113
http://www.securitytracker.com/id?1025114

Check your stack JSON