CVE-2011-0385
The administrative web interface on Cisco TelePresence Recording Server devices with software 1.6...
CVE-2011-0385 is a high vulnerability (CVSS 10.0) in Cisco Telepresence Multipoint Switch, published February 25, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.23%, the 92nd percentile. No source names a fixed version.
The administrative web interface on Cisco TelePresence Recording Server devices with software 1.6.x and Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x allows remote attackers to create or overwrite arbitrary files, and possibly execute arbitrary code, via a crafted request, aka Bug IDs CSCth85786 and CSCth61065.
Exploit likelihood
What each source reports
NVD Score used
The administrative web interface on Cisco TelePresence Recording Server devices with software 1.6.x and Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x allows remote attackers to create or overwrite arbitrary files, and possibly execute arbitrary code, via a crafted request, aka Bug IDs CSCth85786 and CSCth61065.
- Record
CVE-2011-0385- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
The administrative web interface on Cisco TelePresence Recording Server devices with software 1.6.x and Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x allows remote attackers to create or overwrite arbitrary files, and possibly execute arbitrary code, via a crafted request, aka Bug IDs CSCth85786 and CSCth61065.
- Record
CVE-2011-0385- Updated
- 2026-11-02
EUVDEUVD-2011-0411 No score
The administrative web interface on Cisco TelePresence Recording Server devices with software 1.6.x and Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x allows remote attackers to create or overwrite arbitrary files, and possibly execute arbitrary code, via a crafted request, aka Bug IDs CSCth85786 and CSCth61065.
- Record
EUVD-2011-0411- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-c7mf-3c4g-q9f2 No score
The administrative web interface on Cisco TelePresence Recording Server devices with software 1.6...
The administrative web interface on Cisco TelePresence Recording Server devices with software 1.6.x and Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x allows remote attackers to create or overwrite arbitrary files, and possibly execute arbitrary code, via a crafted request, aka Bug IDs CSCth85786 and CSCth61065.
- Record
GHSA-c7mf-3c4g-q9f2- Updated
- 2026-11-02
Affected products
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD |
References
cisco.com/en/US/products/products_security_advisory09186a0080b6e11d.shtml
exchange.xforce.ibmcloud.com/vulnerabilities/65604
securitytracker.com/id?1025114
nvd.nist.gov/vuln/detail/CVE-2011-0385
github.com/advisories/GHSA-c7mf-3c4g-q9f2