{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-201201-0310",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "telepresence e20 software",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "cisco",
        "version": "te4.1.1"
      },
      {
        "model": "telepresence e20 software",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "cisco",
        "version": "tenc4.0.0"
      },
      {
        "model": "telepresence e20 software",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "cisco",
        "version": "te2.2"
      },
      {
        "model": "telepresence e20 software",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "cisco",
        "version": "tenc4.1.1-cucm"
      },
      {
        "model": "telepresence e20 software",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "cisco",
        "version": "te4.1.0"
      },
      {
        "model": "telepresence e20 software",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "cisco",
        "version": "te2.2.1"
      },
      {
        "model": "telepresence e20 software",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "cisco",
        "version": "tenc4.1.0"
      },
      {
        "model": "telepresence e20 software",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "cisco",
        "version": "tenc4.1.1"
      },
      {
        "model": "telepresence e20 software",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "cisco",
        "version": "te4.0.0"
      },
      {
        "model": "telepresence e20 software",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "te4.1.1-cucm"
      },
      {
        "model": "ip video phone e20",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ip video phone e20",
        "scope": null,
        "trust": 0.8,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ip video phone e20 software",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "cisco",
        "version": "te 4.1.1"
      },
      {
        "model": "telepresence e20 software",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "cisco",
        "version": "te4.1.1-cucm"
      },
      {
        "model": "ip video phone e20 te",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "4.1.0"
      },
      {
        "model": "ip video phone e20 te",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "4.1.1"
      }
    ],
    "sources": [
      {
        "db": "BID",
        "id": "51541"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-001158"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201201-296"
      },
      {
        "db": "NVD",
        "id": "CVE-2011-4659"
      }
    ]
  },
  "configurations": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/configurations#",
      "children": {
        "@container": "@list"
      },
      "cpe_match": {
        "@container": "@list"
      },
      "data": {
        "@container": "@list"
      },
      "nodes": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "cpe_match": [
              {
                "cpe22Uri": "cpe:/h:cisco:ip_video_phone_e20",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/a:cisco:telepresence_e20_software",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-001158"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Cisco",
    "sources": [
      {
        "db": "BID",
        "id": "51541"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201201-296"
      }
    ],
    "trust": 0.9
  },
  "cve": "CVE-2011-4659",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "COMPLETE",
            "baseScore": 10.0,
            "confidentialityImpact": "COMPLETE",
            "exploitabilityScore": 10.0,
            "id": "CVE-2011-4659",
            "impactScore": 10.0,
            "integrityImpact": "COMPLETE",
            "severity": "HIGH",
            "trust": 1.8,
            "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "VULHUB",
            "availabilityImpact": "COMPLETE",
            "baseScore": 10.0,
            "confidentialityImpact": "COMPLETE",
            "exploitabilityScore": 10.0,
            "id": "VHN-52604",
            "impactScore": 10.0,
            "integrityImpact": "COMPLETE",
            "severity": "HIGH",
            "trust": 0.1,
            "vectorString": "AV:N/AC:L/AU:N/C:C/I:C/A:C",
            "version": "2.0"
          }
        ],
        "cvssV3": [],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2011-4659",
            "trust": 1.0,
            "value": "HIGH"
          },
          {
            "author": "NVD",
            "id": "CVE-2011-4659",
            "trust": 0.8,
            "value": "High"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-201201-296",
            "trust": 0.6,
            "value": "CRITICAL"
          },
          {
            "author": "VULHUB",
            "id": "VHN-52604",
            "trust": 0.1,
            "value": "HIGH"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-52604"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-001158"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201201-296"
      },
      {
        "db": "NVD",
        "id": "CVE-2011-4659"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Cisco TelePresence Software before TE 4.1.1 on the Cisco IP Video Phone E20 has a default password for the root account after an upgrade to TE 4.1.0, which makes it easier for remote attackers to modify the configuration via an SSH session, aka Bug ID CSCtw69889, a different vulnerability than CVE-2011-2555. The problem is Bug ID CSCtw69889 It is a problem. This vulnerability CVE-2011-2555 Is a different vulnerability.By a third party SSH The settings may be changed through the session. Cisco IP Video Phone E20 is prone to a remote authentication-bypass vulnerability. \nAn attacker can exploit this issue to gain unauthorized root access to  the affected device. Successful exploits will result in the complete  compromise of the device. \n\nThe vulnerability is due to an architectural change that was made in\nthe way the system maintains administrative accounts. An attacker who is able\nto take advantage of this vulnerability could log in to the device as\nthe root user and perform arbitrary actions with elevated privileges. \n\nCisco has released free software updates that address this\nvulnerability. \n\nWorkarounds that mitigate this vulnerability are available. \n\nThe TE 4.1.0 release has been deferred from Cisco.com and\nTandberg.com, and is no longer available for download. The deferral\nnotice can be found at the following link: Software Deferral Notice\n\n\nAdministrators can determine the version of software running on their\ndevice by logging in to the command-line interface (CLI) as the admin\nuser and issuing the xstatus systemunit command and finding the\nSystemUnit Software Version field. \n\nExample:\n\n    $: ssh admin@203.0.113.134\n\n\n\n    TANDBERG Codec Release TE4.1.0.137456\n\n    SW Release Date: 2011-11-18\n\n\n\n    OK\n\n\n\n    xstatus systemunit\n\n\n\n    *s SystemUnit ProductType: \"TANDBERG Codec\"\n\n    *s SystemUnit ProductId: \"TANDBERG E20\"\n\n    *s SystemUnit Uptime: 91273\n\n    *s SystemUnit Software Version: \"TE4.1.0.137456\"\n\n    *s SystemUnit Software Name: \"s52100\"\n\n    *s SystemUnit Software ReleaseDate: \"2011-11-18\"\n\n    *s SystemUnit Hardware Module SerialNumber: \"M1AD18B023025\"\n\n    *s SystemUnit Hardware Module MainBoard: \"101390-6\"\n\n    *s SystemUnit Hardware Module BootSoftware: \"U-Boot 2010.06-36\"\n\n    *s SystemUnit State System: Initialized\n\n    *s SystemUnit State Subsystem Application: Initialized\n\n    *s SystemUnit State Cradle: On\n\n    *s SystemUnit State CameraLid: Off\n\n    *s SystemUnit ContactInfo: \"demo.user@example.com\"\n\n    *s SystemUnit Bluetooth Devices 1 Name: \"9xxPlantronics\"\n\n    *s SystemUnit Bluetooth Devices 1 Address: \"L023:8F:425M3D\"\n\n    *s SystemUnit Bluetooth Devices 1 Type: 2360324\n\n    *s SystemUnit Bluetooth Devices 1 Status: bonded\n\n    *s SystemUnit Bluetooth Devices 1 LastSeen: \"2011-12-20 11:49:36\"\n\n    ** end\n\n\n\n    OK\n\nProducts Confirmed Not Vulnerable\n+--------------------------------\n\nNo other Cisco products are currently known to be affected by this\nvulnerability. This single super account\nutilized the same password for both the admin and root authentication\nand was always enabled. With the introduction of TE 4.1.0, an\narchitectural change was made to help harden the devices by allowing\nadministrators to disable the root account. The intended result of\nthis change is to separate the super account into two accounts, root\nand admin, while subsequently disabling the root account by default. \n\nIt was found that in many cases, customers upgrading from a previous\nrelease of TE software to TE 4.1.0 are likely to experience an error\ncondition in which the root account is not properly disabled. This\ncreates a situation in which the root account is accessible via SSH\nwith a default password. It was subsequently discovered that the\ncommand implemented to allow an administrator to enable or disable the\nroot account does not function correctly. \n\nWorkarounds are available in the Workarounds section of this\ndocument.  These workarounds involve changing the root and admin\npasswords to administrator-defined values. \n\nVulnerability Scoring Details\n=============================\n\nCisco has scored the vulnerability in this advisory based on the\nCommon Vulnerability Scoring System (CVSS). The CVSS scoring in this\nsecurity advisory is in accordance with CVSS version 2.0. \n\nCVSS is a standards-based scoring method that conveys vulnerability\nseverity and helps organizations determine the urgency and priority of\na response. \n\nCisco has provided a base and temporal score. Customers can also\ncompute environmental scores that help determine the impact of the\nvulnerability in their own networks. \n\nCisco has provided additional information regarding CVSS at the\nfollowing link:\nhttp://www.cisco.com/web/about/security/intelligence/cvss-qandas.html\n\nCisco has also provided a CVSS calculator to compute the environmental\nimpact for individual networks at the following link:\nhttp://intellishield.cisco.com/security/alertmanager/cvss\n\n\n*  CSCtw69889 - Cisco TelePresence TE Software Default Root Account Vulnerability \n\nCVSS Base Score - 10.0\n    Access Vector -            Network\n    Access Complexity -        Low\n    Authentication -           None\n    Confidentiality Impact -   Complete\n    Integrity Impact -         Complete\n    Availability Impact -      Complete\n\nCVSS Temporal Score - 8.7\n    Exploitability -           High\n    Remediation Level -        Official-Fix\n    Report Confidence -        Confirmed\n\nImpact\n======\n\nSuccessful exploitation of the vulnerability could allow an\nunauthenticated, remote attacker to gain root access to the affected\ndevice.  This could allow the attacker to take arbitrary actions on\nthe device with elevated privileges. \n\nSoftware Versions and Fixes\n===========================\n\nWhen considering software upgrades, customers are advised to consult\nthe Cisco Security Advisories and Responses archive at:\nhttp://www.cisco.com/go/psirt\nAnd review subsequent advisories to determine exposure and a complete\nupgrade solution. \n\nIn all cases, customers should ensure that the devices to be upgraded\ncontain sufficient memory and confirm that current hardware and\nsoftware configurations will continue to be supported properly by the\nnew release. If the information is not clear, customers are advised to\ncontact the Cisco Technical Assistance Center (TAC) or their\ncontracted maintenance providers. \n\nCisco TelePresence Software version TE 4.1.1 is available on Cisco.com\nand replaces TE 4.1.0. Prior to deploying software,\ncustomers are advised to consult their maintenance providers or check\nthe software for feature set compatibility and known issues that are\nspecific to their environments. \n\nCustomers may only install and expect support for feature sets they\nhave purchased. By installing, downloading, accessing, or otherwise\nusing such software upgrades, customers agree to follow the terms of\nthe Cisco software license at:\nhttp://www.cisco.com/en/US/docs/general/warranty/English/EU1KEN_.html\nOr as set forth at:\nhttp://www.cisco.com/public/sw-center/sw-usingswc.shtml\n\nDo not contact psirt@cisco.com or security-alert@cisco.com for\nsoftware upgrades. \n\nCustomers with Service Contracts\n+-------------------------------\n\nCustomers with contracts should obtain upgraded software through their\nregular update channels. For most customers, upgrades should be\nobtained through the Software Center on Cisco.com at:\nhttp://www.cisco.com\n\nCustomers Using Third-Party Support Organizations\n+------------------------------------------------\n\nCustomers with Cisco products that are provided or maintained through\nprior or existing agreements with third-party support organizations,\nsuch as Cisco Partners, authorized resellers, or service providers,\nshould contact that organization for assistance with the appropriate\ncourse of action. \n\nThe effectiveness of any workaround or fix depends on specific\ncustomer situations, such as product mix, network topology, traffic\nbehavior, and organizational mission. Because of the variety of\naffected products and releases, customers should consult their service\nproviders or support organizations to ensure that any applied\nworkaround or fix is the most appropriate in the intended network\nbefore it is deployed. \n\nCustomers Without Service Contracts\n+----------------------------------\n\nCustomers who purchase directly from Cisco but do not hold a Cisco\nservice contract and customers who make purchases through third-party\nvendors but are unsuccessful in obtaining fixed software through their\npoint of sale should obtain upgrades by contacting the Cisco Technical\nAssistance Center (TAC):\n\n  * +1 800 553 2447 (toll free from within North America) \n  * +1 408 526 7209 (toll call from anywhere in the world) \n  * e-mail: tac@cisco.com\n\nCustomers should have the product serial number available and be\nprepared to provide the URL of this advisory as evidence of\nentitlement to a free upgrade. Customers without service contracts\nshould request free upgrades through the TAC. \n\nRefer to Cisco Worldwide Contacts at:\nhttp://www.cisco.com/en/US/support/tsd_cisco_worldwide_contacts.html\nFor additional TAC contact information, including localized telephone\nnumbers, instructions, and e-mail addresses for support in various\nlanguages. \n\nExploitation and Public Announcements\n=====================================\n\nThe Cisco Product Security Incidence Response Team (PSIRT) is not\naware of any public announcements or malicious use of the\nvulnerability that is described in this advisory. \n\nThis vulnerability was discovered internally. \n\nStatus of This Notice: Final\n============================\n\nTHIS DOCUMENT IS PROVIDED ON AN \"AS IS\" BASIS AND DOES NOT IMPLY ANY\nKIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF\nMERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE\nINFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS\nAT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS\nDOCUMENT AT ANY TIME. \n\nA stand-alone copy or Paraphrase of the text of this document that\nomits the distribution URL in the following section is an uncontrolled\ncopy, and may lack important information or contain factual errors. \n\n\nDistribution\n============\n\nThis advisory is posted on Cisco Security Intelligence Operations at\nthe following link:\nhttp://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120118-te\n\nAdditionally, a text version of this advisory is clear signed with the\nCisco PSIRT PGP key and circulated among the following e-mail\naddresses:\n\n  * cust-security-announce@cisco.com\n  * first-bulletins@lists.first.org\n  * bugtraq@securityfocus.com\n  * vulnwatch@vulnwatch.org\n  * cisco@spot.colorado.edu\n  * cisco-nsp@puck.nether.net\n  * full-disclosure@lists.grok.org.uk\n\nFuture updates of this advisory, if any, will reside on Cisco.com but\nmay not be announced on mailing lists. Users can monitor this\nadvisory\u0027s URL for any updates. \n\n\nRevision History\n================\n\n+-------------------------------------------------------------------+\n| Revision 1.0   | 2012-January-18    | Initial Public Release      |\n+-------------------------------------------------------------------+\n\nCisco Security Procedures\n=========================\n\nComplete information about reporting security vulnerabilities in Cisco\nproducts, obtaining assistance with security incidents, and\nregistering to receive security information from Cisco is available on\nCisco.com at:\nhttp://www.cisco.com/en/US/products/products_security_vulnerability_policy.html\nThis web page includes instructions for press inquiries regarding\nCisco Security Advisories. All Cisco Security Advisories are available\nat:\nhttp://www.cisco.com/ go/psirt\n\n+--------------------------------------------------------------------\nCopyright 2010-2012 Cisco Systems, Inc. All rights reserved. \n+--------------------------------------------------------------------\n\n-----BEGIN PGP SIGNATURE-----\nVersion: GnuPG/MacGPG2 v2.0.17 (Darwin)\nComment: GPGTools - http://gpgtools.org\n\niF4EAREIAAYFAk8W04IACgkQQXnnBKKRMNCWzwD/XJg6ZExNa1xHUZ0cLRjzefT5\nnAE+tnRMfQo2m/79FewA/1gWGvSvM8jgY8OkpaE1mi/EelNYhB3Uk9FDXXMAdTEl\n=AFEp\n-----END PGP SIGNATURE-----\n",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2011-4659"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-001158"
      },
      {
        "db": "BID",
        "id": "51541"
      },
      {
        "db": "VULHUB",
        "id": "VHN-52604"
      },
      {
        "db": "PACKETSTORM",
        "id": "108795"
      }
    ],
    "trust": 2.07
  },
  "exploit_availability": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/exploit_availability#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "reference": "https://www.scap.org.cn/vuln/vhn-52604",
        "trust": 0.1,
        "type": "unknown"
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-52604"
      }
    ]
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2011-4659",
        "trust": 2.9
      },
      {
        "db": "BID",
        "id": "51541",
        "trust": 1.0
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-001158",
        "trust": 0.8
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201201-296",
        "trust": 0.7
      },
      {
        "db": "CISCO",
        "id": "20120118 CISCO IP VIDEO PHONE E20 DEFAULT ROOT ACCOUNT",
        "trust": 0.6
      },
      {
        "db": "NSFOCUS",
        "id": "18606",
        "trust": 0.6
      },
      {
        "db": "PACKETSTORM",
        "id": "108795",
        "trust": 0.2
      },
      {
        "db": "VULHUB",
        "id": "VHN-52604",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-52604"
      },
      {
        "db": "BID",
        "id": "51541"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-001158"
      },
      {
        "db": "PACKETSTORM",
        "id": "108795"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201201-296"
      },
      {
        "db": "NVD",
        "id": "CVE-2011-4659"
      }
    ]
  },
  "id": "VAR-201201-0310",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-52604"
      }
    ],
    "trust": 0.01
  },
  "last_update_date": "2024-11-23T23:10:03.284000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "cisco-sa-20120118-te",
        "trust": 0.8,
        "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120118-te"
      },
      {
        "title": "cisco-sa-20120118-te",
        "trust": 0.8,
        "url": "http://www.cisco.com/cisco/web/support/JP/111/1110/1110027_cisco-sa-20120118-te-j.html"
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-001158"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "CWE-264",
        "trust": 1.9
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-52604"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-001158"
      },
      {
        "db": "NVD",
        "id": "CVE-2011-4659"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 2.1,
        "url": "http://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-20120118-te"
      },
      {
        "trust": 0.8,
        "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2011-4659"
      },
      {
        "trust": 0.8,
        "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2011-4659"
      },
      {
        "trust": 0.6,
        "url": "http://www.securityfocus.com/bid/51541"
      },
      {
        "trust": 0.6,
        "url": "http://www.nsfocus.net/vulndb/18606"
      },
      {
        "trust": 0.4,
        "url": "http://www.cisco.com"
      },
      {
        "trust": 0.1,
        "url": "http://www.cisco.com/go/psirt"
      },
      {
        "trust": 0.1,
        "url": "http://www.cisco.com/en/us/support/tsd_cisco_worldwide_contacts.html"
      },
      {
        "trust": 0.1,
        "url": "http://www.cisco.com/en/us/products/products_security_vulnerability_policy.html"
      },
      {
        "trust": 0.1,
        "url": "http://www.cisco.com/en/us/docs/general/warranty/english/eu1ken_.html"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2011-4659"
      },
      {
        "trust": 0.1,
        "url": "http://www.cisco.com/web/about/security/intelligence/cvss-qandas.html"
      },
      {
        "trust": 0.1,
        "url": "http://www.cisco.com/"
      },
      {
        "trust": 0.1,
        "url": "http://www.cisco.com/public/sw-center/sw-usingswc.shtml"
      },
      {
        "trust": 0.1,
        "url": "http://gpgtools.org"
      },
      {
        "trust": 0.1,
        "url": "http://tools.cisco.com/security/center/content/ciscoappliedmitigationbulletin/cisco-amb-20120118-te"
      },
      {
        "trust": 0.1,
        "url": "http://intellishield.cisco.com/security/alertmanager/cvss"
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-52604"
      },
      {
        "db": "BID",
        "id": "51541"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-001158"
      },
      {
        "db": "PACKETSTORM",
        "id": "108795"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201201-296"
      },
      {
        "db": "NVD",
        "id": "CVE-2011-4659"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "VULHUB",
        "id": "VHN-52604"
      },
      {
        "db": "BID",
        "id": "51541"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-001158"
      },
      {
        "db": "PACKETSTORM",
        "id": "108795"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201201-296"
      },
      {
        "db": "NVD",
        "id": "CVE-2011-4659"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2012-01-19T00:00:00",
        "db": "VULHUB",
        "id": "VHN-52604"
      },
      {
        "date": "2012-01-18T00:00:00",
        "db": "BID",
        "id": "51541"
      },
      {
        "date": "2012-01-24T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2012-001158"
      },
      {
        "date": "2012-01-18T16:47:26",
        "db": "PACKETSTORM",
        "id": "108795"
      },
      {
        "date": "1900-01-01T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201201-296"
      },
      {
        "date": "2012-01-19T15:55:00.820000",
        "db": "NVD",
        "id": "CVE-2011-4659"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2012-02-10T00:00:00",
        "db": "VULHUB",
        "id": "VHN-52604"
      },
      {
        "date": "2012-01-18T00:00:00",
        "db": "BID",
        "id": "51541"
      },
      {
        "date": "2012-01-24T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2012-001158"
      },
      {
        "date": "2012-01-30T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201201-296"
      },
      {
        "date": "2024-11-21T01:32:43.777000",
        "db": "NVD",
        "id": "CVE-2011-4659"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote",
    "sources": [
      {
        "db": "PACKETSTORM",
        "id": "108795"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201201-296"
      }
    ],
    "trust": 0.7
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Cisco TelePresence Software Vulnerabilities whose settings are changed",
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-001158"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "permissions and access control",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201201-296"
      }
    ],
    "trust": 0.6
  }
}