Vulnerabilities > Cisco > Telepresence E20 Software > tenc4.1.1

DATE CVE VULNERABILITY TITLE RISK
2012-01-19 CVE-2011-4659 Permissions, Privileges, and Access Controls vulnerability in Cisco IP Video Phone E20 and Telepresence E20 Software
Cisco TelePresence Software before TE 4.1.1 on the Cisco IP Video Phone E20 has a default password for the root account after an upgrade to TE 4.1.0, which makes it easier for remote attackers to modify the configuration via an SSH session, aka Bug ID CSCtw69889, a different vulnerability than CVE-2011-2555.
network
low complexity
cisco CWE-264
critical
 10.0
10