Description
The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.6.x allows remote authenticated users to execute arbitrary commands via a malformed request, related to "command injection vulnerabilities," aka Bug ID CSCth24671.
References
- 1025112 vdb-entry
- 20110223 Multiple Vulnerabilities in Cisco TelePresence Endpoint Devices vendor-advisory