FKIE_CVE-2011-0354

Vulnerability from fkie_nvd - Published: 2011-02-03 16:00 - Updated: 2026-06-16 23:27
Severity
Summary
The default configuration of Cisco Tandberg C Series Endpoints, and Tandberg E and EX Personal Video units, with software before TC4.0.0 has a blank password for the root account, which makes it easier for remote attackers to obtain access via an unspecified login method.
References
psirt@cisco.comhttp://secunia.com/advisories/43158Vendor Advisory
psirt@cisco.comhttp://securityreason.com/securityalert/8060
psirt@cisco.comhttp://securitytracker.com/id?1025017
psirt@cisco.comhttp://tools.cisco.com/security/center/viewAlert.x?alertId=22314
psirt@cisco.comhttp://www.cisco.com/en/US/products/ps11422/products_security_advisory09186a0080b69541.shtmlVendor Advisory
psirt@cisco.comhttp://www.exploit-db.com/exploits/16100
psirt@cisco.comhttp://www.kb.cert.org/vuls/id/436854US Government Resource
psirt@cisco.comhttp://www.securityfocus.com/bid/46107
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/43158Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://securityreason.com/securityalert/8060
af854a3a-2127-422b-91ae-364da2661108http://securitytracker.com/id?1025017
af854a3a-2127-422b-91ae-364da2661108http://tools.cisco.com/security/center/viewAlert.x?alertId=22314
af854a3a-2127-422b-91ae-364da2661108http://www.cisco.com/en/US/products/ps11422/products_security_advisory09186a0080b69541.shtmlVendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.exploit-db.com/exploits/16100
af854a3a-2127-422b-91ae-364da2661108http://www.kb.cert.org/vuls/id/436854US Government Resource
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/46107
Impacted products
Vendor Product Version
cisco tandberg_endpoint *
cisco tandberg_endpoint tc2.1.2
cisco tandberg_endpoint tc3.0.0
cisco tandberg_endpoint tc3.1.0
cisco tandberg_endpoint tc3.1.1
cisco tandberg_endpoint tc3.1.2
cisco tandberg_endpoint c20
cisco tandberg_endpoint c40
cisco tandberg_endpoint c60
cisco tandberg_endpoint c90
cisco tandberg_personal_video_unit_software *
cisco tandberg_personal_video_unit_software tc3.1.0
cisco tandberg_personal_video_unit_software tc3.1.1
cisco tandberg_personal_video_unit_software tc3.1.2
cisco tandberg_personal_video_unit ex90
cisco tandberg_personal_video_unit_software *
cisco tandberg_personal_video_unit_software te1.0.1
cisco tandberg_personal_video_unit_software te2.2.0
cisco tandberg_personal_video_unit e20
cisco tandberg_personal_video_unit_software tc3.1.2
cisco tandberg_personal_video_unit ex60
To clipboard 

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "psirt@cisco.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:tandberg_endpoint:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "A87B81CF-6847-4F05-824B-0D1466B7C9A6",
              "versionEndIncluding": "tc3.1.3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:tandberg_endpoint:tc2.1.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "1B45456C-8D42-4C7F-B575-1A7DDBA237F5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:tandberg_endpoint:tc3.0.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "029C0FEE-74CA-4E7E-B1F2-9DBDB67372BD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:tandberg_endpoint:tc3.1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "FA83FF69-F265-4DD6-8195-A9C907B40DA1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:tandberg_endpoint:tc3.1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "2C0562C3-F681-4D89-9076-54F007A691E6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:tandberg_endpoint:tc3.1.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "94D6F6FD-3C4D-4D26-B5E4-AB229C8A0CD5",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:cisco:tandberg_endpoint:c20:*:*:*:*:*:*:*",
              "matchCriteriaId": "61F895B7-8F8D-4469-ABFC-CCE146A24DBA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:cisco:tandberg_endpoint:c40:*:*:*:*:*:*:*",
              "matchCriteriaId": "3DB4373E-2E5B-433E-8FDB-602373A5F21E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:cisco:tandberg_endpoint:c60:*:*:*:*:*:*:*",
              "matchCriteriaId": "E96385EC-31F4-4CC9-854A-0A5F7F8DBA20",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:cisco:tandberg_endpoint:c90:*:*:*:*:*:*:*",
              "matchCriteriaId": "94515F99-3636-411C-ACAB-330F12E89722",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:tandberg_personal_video_unit_software:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F97F04E1-CC50-4E82-927E-5B408249A8C2",
              "versionEndIncluding": "tc3.1.3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:tandberg_personal_video_unit_software:tc3.1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "EA17CDAB-6DB2-4C08-887E-8E4BEA5BC489",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:tandberg_personal_video_unit_software:tc3.1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "6055257E-12D7-4091-9E58-CAE791390225",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:tandberg_personal_video_unit_software:tc3.1.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "31AB455A-C4E2-4872-B95D-025B4AB9686F",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:cisco:tandberg_personal_video_unit:ex90:*:*:*:*:*:*:*",
              "matchCriteriaId": "84116DE1-6669-46E8-BA25-BA43FAF6A4A2",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:tandberg_personal_video_unit_software:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "CF91C5C8-FF37-4452-AA35-1EC458DFCF12",
              "versionEndIncluding": "te2.2.1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:tandberg_personal_video_unit_software:te1.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "A5AFD63E-784E-432E-9E42-ADDACCBAF095",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:tandberg_personal_video_unit_software:te2.2.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "DD5A756A-E58E-41C9-B001-D0E39F8F513E",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:cisco:tandberg_personal_video_unit:e20:*:*:*:*:*:*:*",
              "matchCriteriaId": "77BC6923-BC31-4DEB-92C8-4FFEA26BA2E9",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:tandberg_personal_video_unit_software:tc3.1.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "31AB455A-C4E2-4872-B95D-025B4AB9686F",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:cisco:tandberg_personal_video_unit:ex60:*:*:*:*:*:*:*",
              "matchCriteriaId": "EFB7F8EA-7F3C-4B42-BDCC-213EAA9DC44B",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The default configuration of Cisco Tandberg C Series Endpoints, and Tandberg E and EX Personal Video units, with software before TC4.0.0 has a blank password for the root account, which makes it easier for remote attackers to obtain access via an unspecified login method."
    },
    {
      "lang": "es",
      "value": "La configuraci\u00f3n por defecto de Cisco Tandberg C Series Endpoints, y Tandberg E y EX Personal Video units, con el software anterior a TC4.0.0 tiene una contrase\u00f1a en blanco para la cuenta de root, lo que permite que sea m\u00e1s f\u00e1cil para los atacantes remotos obtener acceso a trav\u00e9s de un m\u00e9todo de entrada no especificado."
    }
  ],
  "id": "CVE-2011-0354",
  "lastModified": "2026-06-16T23:27:13.630",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 10.0,
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 10.0,
        "obtainAllPrivilege": true,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2011-02-03T16:00:02.570",
  "references": [
    {
      "source": "psirt@cisco.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/43158"
    },
    {
      "source": "psirt@cisco.com",
      "url": "http://securityreason.com/securityalert/8060"
    },
    {
      "source": "psirt@cisco.com",
      "url": "http://securitytracker.com/id?1025017"
    },
    {
      "source": "psirt@cisco.com",
      "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=22314"
    },
    {
      "source": "psirt@cisco.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.cisco.com/en/US/products/ps11422/products_security_advisory09186a0080b69541.shtml"
    },
    {
      "source": "psirt@cisco.com",
      "url": "http://www.exploit-db.com/exploits/16100"
    },
    {
      "source": "psirt@cisco.com",
      "tags": [
        "US Government Resource"
      ],
      "url": "http://www.kb.cert.org/vuls/id/436854"
    },
    {
      "source": "psirt@cisco.com",
      "url": "http://www.securityfocus.com/bid/46107"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/43158"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://securityreason.com/securityalert/8060"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://securitytracker.com/id?1025017"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=22314"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.cisco.com/en/US/products/ps11422/products_security_advisory09186a0080b69541.shtml"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.exploit-db.com/exploits/16100"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "US Government Resource"
      ],
      "url": "http://www.kb.cert.org/vuls/id/436854"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/46107"
    }
  ],
  "sourceIdentifier": "psirt@cisco.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-255"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.