What’s Vulnerable › Vulnerabilities

CVE-2011-0386

• Severity: critical (CVSS 9.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 4.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2011-02-25 · updated 2026-06-16
• Weakness: CWE-94

Description

The XML-RPC implementation on Cisco TelePresence Recording Server devices with software 1.6.x and 1.7.x before 1.7.1 allows remote attackers to overwrite files and consequently execute arbitrary code via a malformed request, aka Bug ID CSCti50739.

Affected products

• Cisco Telepresence Recording Server: all versions
• Cisco Telepresence Recording Server Software: 1.6.1, 1.6.2, 1.6.3, 1.7.0, 1.7.1

References

• http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e11d.shtml
• http://www.securityfocus.com/bid/46522
• http://www.securitytracker.com/id?1025114
• https://exchange.xforce.ibmcloud.com/vulnerabilities/65605
• http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e11d.shtml
• http://www.securityfocus.com/bid/46522
• http://www.securitytracker.com/id?1025114
• https://exchange.xforce.ibmcloud.com/vulnerabilities/65605

Get alerted when CVE-2011-0386 or the next vulnerability affects your stack