Vulnerabilities > Cisco > Telepresence System Software > 1.6.1

DATE CVE VULNERABILITY TITLE RISK
2013-08-08 CVE-2013-3454 Credentials Management vulnerability in Cisco products
Cisco TelePresence System Software 1.10.1 and earlier on 500, 13X0, 1X00, 30X0, and 3X00 devices, and 6.0.3 and earlier on TX 9X00 devices, has a default password for the pwrecovery account, which makes it easier for remote attackers to modify the configuration or perform arbitrary actions via HTTPS requests, aka Bug ID CSCui43128.
network
low complexity
cisco CWE-255
critical
 10.0
10
2011-02-25 CVE-2011-0376 Information Exposure vulnerability in Cisco products
The TFTP implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x, 1.6.0, and 1.6.1 allows remote attackers to obtain sensitive information via a GET request, aka Bug ID CSCte43876.
network
low complexity
cisco CWE-200
critical
 10.0
10