Unscored CVE-2013-3405 EUVD-2013-3340GHSA-2jx8-662q-2wpq

The web portal in TC software on Cisco TelePresence endpoints does not require an exact password match during a login attempt by a user who…

Published Jul 10, 2013 · Updated Sep 17, 2024 · Assigned by cisco

Description

The web portal in TC software on Cisco TelePresence endpoints does not require an exact password match during a login attempt by a user who has not configured a password, which allows remote attackers to bypass authentication by sending an arbitrary password, aka Bug ID CSCud96071.

References

20130710 Cisco TC Software Improper Validation of Empty Password vendor-advisory