Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2013-3454


Cisco TelePresence System Software 1.10.1 and earlier on 500, 13X0, 1X00, 30X0, and 3X00 devices, and 6.0.3 and earlier on TX 9X00 devices, has a default password for the pwrecovery account, which makes it easier for remote attackers to modify the configuration or perform arbitrary actions via HTTPS requests, aka Bug ID CSCui43128.


Published

2013-08-08T14:55:08.717

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 10.0 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

10.0

Impact Score

10.0

Weaknesses
  • Type: Primary
    CWE-255

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Hardware cisco telepresence_system_tx9000 * Yes
Hardware cisco telepresence_system_tx9200 * Yes
Application cisco telepresence_system_software ≤ 6.0.3\(33\) No
Application cisco telepresence_system_software 1.9.0\(46\) Yes
Application cisco telepresence_system_software 1.9.0.1\(3\) Yes
Application cisco telepresence_system_software 1.9.1\(68\) Yes
Application cisco telepresence_system_software 1.9.2 Yes
Application cisco telepresence_system_software 1.9.2\(19\) No
Application cisco telepresence_system_software 1.9.3 Yes
Application cisco telepresence_system_software 1.9.3\(44\) No
Application cisco telepresence_system_software 1.9.4 Yes
Application cisco telepresence_system_software 1.9.4\(19\) No
Application cisco telepresence_system_software 1.9.5 Yes
Application cisco telepresence_system_software 1.9.5\(7\) No
Application cisco telepresence_system_software 1.9.6 Yes
Application cisco telepresence_system_software 1.9.6\(2\) No
Application cisco telepresence_system_software 6.0.0.1\(4\) Yes
Application cisco telepresence_system_software 6.0.1\(50\) Yes
Application cisco telepresence_system_software 6.0.2\(28\) Yes
Application cisco telepresence_system_software ≤ 1.10.1 Yes
Application cisco telepresence_system_software 1.2.3 Yes
Application cisco telepresence_system_software 1.2.3\(1101\) Yes
Application cisco telepresence_system_software 1.3.2 Yes
Application cisco telepresence_system_software 1.3.2\(1393\) Yes
Application cisco telepresence_system_software 1.4.7 Yes
Application cisco telepresence_system_software 1.4.7\(2229\) Yes
Application cisco telepresence_system_software 1.5.1 Yes
Application cisco telepresence_system_software 1.5.1\(2082\) Yes
Application cisco telepresence_system_software 1.5.3 Yes
Application cisco telepresence_system_software 1.5.3\(2115\) Yes
Application cisco telepresence_system_software 1.5.10 Yes
Application cisco telepresence_system_software 1.5.10\(3648\) Yes
Application cisco telepresence_system_software 1.5.11 Yes
Application cisco telepresence_system_software 1.5.11\(3659\) Yes
Application cisco telepresence_system_software 1.5.12 Yes
Application cisco telepresence_system_software 1.5.12\(3701\) Yes
Application cisco telepresence_system_software 1.5.13 Yes
Application cisco telepresence_system_software 1.5.13\(3717\) Yes
Application cisco telepresence_system_software 1.6.0 Yes
Application cisco telepresence_system_software 1.6.0\(3954\) Yes
Application cisco telepresence_system_software 1.6.1 Yes
Application cisco telepresence_system_software 1.6.2 Yes
Application cisco telepresence_system_software 1.6.2\(4023\) Yes
Application cisco telepresence_system_software 1.6.3 Yes
Application cisco telepresence_system_software 1.6.3\(4042\) Yes
Application cisco telepresence_system_software 1.6.4 Yes
Application cisco telepresence_system_software 1.6.4\(4072\) Yes
Application cisco telepresence_system_software 1.6.5 Yes
Application cisco telepresence_system_software 1.6.5\(4097\) Yes
Application cisco telepresence_system_software 1.6.6 Yes
Application cisco telepresence_system_software 1.6.6\(4109\) Yes
Application cisco telepresence_system_software 1.6.7 Yes
Application cisco telepresence_system_software 1.6.7\(4212\) Yes
Application cisco telepresence_system_software 1.6.8 Yes
Application cisco telepresence_system_software 1.6.8\(4222\) Yes
Application cisco telepresence_system_software 1.7.0.1\(4764\) Yes
Application cisco telepresence_system_software 1.7.0.2\(4719\) Yes
Application cisco telepresence_system_software 1.7.1\(4864\) Yes
Application cisco telepresence_system_software 1.7.2\(4937\) Yes
Application cisco telepresence_system_software 1.7.2.1\(2\) Yes
Application cisco telepresence_system_software 1.7.4\(270\) Yes
Application cisco telepresence_system_software 1.7.5\(42\) Yes
Application cisco telepresence_system_software 1.7.6\(4\) Yes
Application cisco telepresence_system_software 1.8.0\(55\) Yes
Application cisco telepresence_system_software 1.8.1\(34\) Yes
Application cisco telepresence_system_software 1.8.2\(11\) Yes
Application cisco telepresence_system_software 1.8.3\(4\) Yes
Application cisco telepresence_system_software 1.9.0\(46\) Yes
Application cisco telepresence_system_software 1.9.0.1\(3\) Yes
Application cisco telepresence_system_software 1.9.1\(68\) Yes
Application cisco telepresence_system_software 1.9.2 Yes
Application cisco telepresence_system_software 1.9.3 Yes
Application cisco telepresence_system_software 1.9.4 Yes
Application cisco telepresence_system_software 1.9.5 Yes
Application cisco telepresence_system_software 1.9.6 Yes
Application cisco telepresence_system_software 1.10.0 Yes
Hardware cisco telepresence_system_1300 - Yes
Hardware cisco telepresence_system_1300-65 - Yes
Hardware cisco telepresence_system_3000 * Yes
Hardware cisco telepresence_system_3010 * Yes
Hardware cisco telepresence_system_3200 * Yes
Hardware cisco telepresence_system_3210 * Yes
Hardware cisco telepresence_system_500-32 - Yes
Hardware cisco telepresence_system_500-37 - Yes

References