Unscored CVE-2013-3454 EUVD-2013-3389GHSA-79wc-qq86-gqcv

Cisco TelePresence System Software 1.10.1 and earlier on 500, 13X0, 1X00, 30X0, and 3X00 devices, and 6.0.3 and earlier on TX 9X00 devices,…

Published Aug 8, 2013 · Updated Sep 17, 2024 · Assigned by cisco

Description

Cisco TelePresence System Software 1.10.1 and earlier on 500, 13X0, 1X00, 30X0, and 3X00 devices, and 6.0.3 and earlier on TX 9X00 devices, has a default password for the pwrecovery account, which makes it easier for remote attackers to modify the configuration or perform arbitrary actions via HTTPS requests, aka Bug ID CSCui43128.

References

20130807 Cisco TelePresence System Default Credentials Vulnerability vendor-advisory