CVE-2011-0354

Estado: ModificadaAlta (10)—💥 Exploit

The default configuration of Cisco Tandberg C Series Endpoints, and Tandberg E and EX Personal Video units, with software before TC4.0.0 has a blank password for the root account, which makes it easier for remote attackers to obtain access via an unspecified login method.

CVSS

Versión: 2.0
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Puntuación base: 10

Probabilidad de explotación (EPSS)

Probabilidad de explotación en los próximos 30 días: 14%
Percentil entre todas las CVEs puntuadas: 96
Fecha de la puntuación: 7/10/2026

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

💥 Exploits públicos

Hay código de explotación o plantillas de detección públicos. No es lo mismo que explotación activa confirmada (KEV), pero aumenta el riesgo: parchee con prioridad.

Publicado en Exploit-DB · Tandberg E & EX & C Series Endpoints - Default Root Account Credentials (2/2/2011)

Tecnologías afectadas (3)

Cisco — Tandberg Endpoint Cisco — Tandberg Personal Video Unit Cisco — Tandberg Personal Video Unit Software

CWE

CWE-255

Referencias

JSON original (NVD)

Mostrar

{
  "id": "CVE-2011-0354",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 10,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": true,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@cisco.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2011-02-03T16:00:02.570",
  "references": [
    {
      "url": "http://secunia.com/advisories/43158",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://securityreason.com/securityalert/8060",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://securitytracker.com/id?1025017",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=22314",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.cisco.com/en/US/products/ps11422/products_security_advisory09186a0080b69541.shtml",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.exploit-db.com/exploits/16100",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.kb.cert.org/vuls/id/436854",
      "tags": [
        "US Government Resource"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/46107",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://secunia.com/advisories/43158",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securityreason.com/securityalert/8060",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securitytracker.com/id?1025017",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=22314",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.cisco.com/en/US/products/ps11422/products_security_advisory09186a0080b69541.shtml",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.exploit-db.com/exploits/16100",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.kb.cert.org/vuls/id/436854",
      "tags": [
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/46107",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-255"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The default configuration of Cisco Tandberg C Series Endpoints, and Tandberg E and EX Personal Video units, with software before TC4.0.0 has a blank password for the root account, which makes it easier for remote attackers to obtain access via an unspecified login method."
    },
    {
      "lang": "es",
      "value": "La configuración por defecto de Cisco Tandberg C Series Endpoints, y Tandberg E y EX Personal Video units, con el software anterior a TC4.0.0 tiene una contraseña en blanco para la cuenta de root, lo que permite que sea más fácil para los atacantes remotos obtener acceso a través de un método de entrada no especificado."
    }
  ],
  "lastModified": "2026-06-16T23:27:13.630",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:tandberg_endpoint:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A87B81CF-6847-4F05-824B-0D1466B7C9A6",
              "versionEndIncluding": "tc3.1.3"
            },
            {
              "criteria": "cpe:2.3:a:cisco:tandberg_endpoint:tc2.1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1B45456C-8D42-4C7F-B575-1A7DDBA237F5"
            },
            {
              "criteria": "cpe:2.3:a:cisco:tandberg_endpoint:tc3.0.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "029C0FEE-74CA-4E7E-B1F2-9DBDB67372BD"
            },
            {
              "criteria": "cpe:2.3:a:cisco:tandberg_endpoint:tc3.1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FA83FF69-F265-4DD6-8195-A9C907B40DA1"
            },
            {
              "criteria": "cpe:2.3:a:cisco:tandberg_endpoint:tc3.1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2C0562C3-F681-4D89-9076-54F007A691E6"
            },
            {
              "criteria": "cpe:2.3:a:cisco:tandberg_endpoint:tc3.1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "94D6F6FD-3C4D-4D26-B5E4-AB229C8A0CD5"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:cisco:tandberg_endpoint:c20:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "61F895B7-8F8D-4469-ABFC-CCE146A24DBA"
            },
            {
              "criteria": "cpe:2.3:h:cisco:tandberg_endpoint:c40:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3DB4373E-2E5B-433E-8FDB-602373A5F21E"
            },
            {
              "criteria": "cpe:2.3:h:cisco:tandberg_endpoint:c60:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E96385EC-31F4-4CC9-854A-0A5F7F8DBA20"
            },
            {
              "criteria": "cpe:2.3:h:cisco:tandberg_endpoint:c90:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "94515F99-3636-411C-ACAB-330F12E89722"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:tandberg_personal_video_unit_software:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F97F04E1-CC50-4E82-927E-5B408249A8C2",
              "versionEndIncluding": "tc3.1.3"
            },
            {
              "criteria": "cpe:2.3:a:cisco:tandberg_personal_video_unit_software:tc3.1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EA17CDAB-6DB2-4C08-887E-8E4BEA5BC489"
            },
            {
              "criteria": "cpe:2.3:a:cisco:tandberg_personal_video_unit_software:tc3.1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6055257E-12D7-4091-9E58-CAE791390225"
            },
            {
              "criteria": "cpe:2.3:a:cisco:tandberg_personal_video_unit_software:tc3.1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "31AB455A-C4E2-4872-B95D-025B4AB9686F"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:cisco:tandberg_personal_video_unit:ex90:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "84116DE1-6669-46E8-BA25-BA43FAF6A4A2"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:tandberg_personal_video_unit_software:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CF91C5C8-FF37-4452-AA35-1EC458DFCF12",
              "versionEndIncluding": "te2.2.1"
            },
            {
              "criteria": "cpe:2.3:a:cisco:tandberg_personal_video_unit_software:te1.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A5AFD63E-784E-432E-9E42-ADDACCBAF095"
            },
            {
              "criteria": "cpe:2.3:a:cisco:tandberg_personal_video_unit_software:te2.2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DD5A756A-E58E-41C9-B001-D0E39F8F513E"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:cisco:tandberg_personal_video_unit:e20:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "77BC6923-BC31-4DEB-92C8-4FFEA26BA2E9"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:tandberg_personal_video_unit_software:tc3.1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "31AB455A-C4E2-4872-B95D-025B4AB9686F"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:cisco:tandberg_personal_video_unit:ex60:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EFB7F8EA-7F3C-4B42-BDCC-213EAA9DC44B"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "psirt@cisco.com"
}