CVE-2011-4659 Cisco TelePresence Software before TE 4.1.1 on the Cisco IP Video Phone E20 has a default password for the root account after an upgrade to
- Exploited in the wild
- Not known
- Fix
- None listed
What is CVE-2011-4659?
CVE-2011-4659 is a critical vulnerability in n/a, published on 19 Jan 2012.
Official description
Cisco TelePresence Software before TE 4.1.1 on the Cisco IP Video Phone E20 has a default password for the root account after an upgrade to TE 4.1.0, which makes it easier for remote attackers to modify the configuration via an SSH session, aka Bug ID CSCtw69889, a different vulnerability than CVE-2011-2555.
Weakness: CWE-264
Which versions are affected by CVE-2011-4659?
It affects 2 products.
Products include Cisco Ip Video Phone E20, Cisco Telepresence E20 Software.
How do I fix CVE-2011-4659?
No fix has been published for CVE-2011-4659 yet. Limit exposure of the affected software until one is available.
Is CVE-2011-4659 being exploited?
There is no known exploitation of CVE-2011-4659 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-8hc9-7v2m-wf28.