CVE-2011-4659

critical Cisco
CVSS v3 Base Score
10.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS Score
0.9%
Exploitation probability in 30 days
Top 24% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
Low
Confidentiality
C
Integrity
C
Availability
C
Published: January 19, 2012 (5228 days ago)
Last Modified: April 29, 2026
Vendor: Cisco
Source: NVD

Description

Cisco TelePresence Software before TE 4.1.1 on the Cisco IP Video Phone E20 has a default password for the root account after an upgrade to TE 4.1.0, which makes it easier for remote attackers to modify the configuration via an SSH session, aka Bug ID CSCtw69889, a different vulnerability than CVE-2011-2555.

CWE

CWE-264

Affected Products

cisco telepresence e20 softwarecisco ip video phone e20

References

🔗 tools.cisco.com 🔗 tools.cisco.com