CVE-2011-2538

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

Cisco Video Communications Server (VCS) before X7.0.3 contains a command injection vulnerability which allows remote, authenticated attackers to execute arbitrary commands.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-74

Affected software

VendorProductVersions
CiscoCisco Video Communications Server (VCS)X7.0.3

References

Timeline

Published
Oct 29, 2019
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2011

CVE-2011-25439.0Buffer overflow in the cuil component in Cisco Telepresence System Integrator C Series 4.x before TC4.2.0 allows remote authenticated users CVE-2011-25443.5Cross-site scripting (XSS) vulnerability in the web interface in Cisco TelePresence System MXP Series F9.1 and earlier allows remote authentCVE-2011-25454.3Cross-site scripting (XSS) vulnerability in the SIP implementation on the Cisco SPA8000 and SPA8800 before 6.1.11, SPA2102 and SPA3102 beforCVE-2011-25465.0SQL injection vulnerability in the web-based management interface on Cisco SA 500 series security appliances with software before 2.1.19 allCVE-2011-25479.0The web-based management interface on Cisco SA 500 series security appliances with software before 2.1.19 allows remote authenticated users CVE-2011-25497.8Unspecified vulnerability in Cisco IOS XR 4.1.x before 4.1.1 on Cisco Aggregation Services Routers (ASR) 9000 series devices allows remote aCVE-2011-255510.0Cisco TelePresence Recording Server 1.7.2.x before 1.7.2.1 has a default password for the root administrator account, which makes it easier CVE-2011-25607.8The Packet Capture Service in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x does not properly handle idle TCP coCVE-2011-25617.1The SIP process in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 7.x before 7.1(5b)su4 and 8.x before 8.0(1) does noCVE-2011-25627.8Unspecified vulnerability in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)su2, 7.x before 7.1(5b)sCVE-2011-25637.8Unspecified vulnerability in the Service Advertisement Framework (SAF) in Cisco Unified Communications Manager (aka CUCM, formerly CallManagCVE-2011-25647.8Unspecified vulnerability in the Service Advertisement Framework (SAF) in Cisco Unified Communications Manager (aka CUCM, formerly CallManag
CVE-2011-2538: High severity, CVSS 7.2 | Vulnix