Approved changes feed: RSS · Atom

cpe:2.3:h:cisco:unified_videoconferencing_system_5110:*:*:*:*:*:*:*:*

part: h version: * update: *

VendorCisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5)
ProductUnified Videoconferencing System 5110 (3a209003-bb82-5194-a913-db2a6aa52843)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-4305 vulnerable 2026-06-08 04:55:19.750414 Details available
Cisco Unified Videoconferencing (UVC) System 3545, 5110, 5115, and 5230; Unified Videoconferencing 3527 Primary Rate Interface (PRI) Gateway; Unified Videoconferencing 3522 Basic Rate Interfaces (BRI) Gateway; and Unified Videoconferencing 3515 Multipoint Control Unit (MCU) improperly use cookies for web-interface credentials, which allows remote attackers to obtain sensitive information by reading a (1) cleartext or (2) base64-encoded cleartext cookie, aka Bug ID CSCti54052.
Published: 2010-11-22T19:00:00.000Z
Updated: 2024-09-16T23:45:28.371Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4304 vulnerable 2026-06-08 04:55:19.749802 Details available
The web interface in Cisco Unified Videoconferencing (UVC) System 3545, 5110, 5115, and 5230; Unified Videoconferencing 3527 Primary Rate Interface (PRI) Gateway; Unified Videoconferencing 3522 Basic Rate Interfaces (BRI) Gateway; and Unified Videoconferencing 3515 Multipoint Control Unit (MCU) uses predictable session IDs based on time values, which makes it easier for remote attackers to hijack sessions via a brute-force attack, aka Bug ID CSCti54048.
Published: 2010-11-22T19:00:00.000Z
Updated: 2024-09-16T22:09:42.453Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4303 vulnerable 2026-06-08 04:55:19.749359 Details available
Cisco Unified Videoconferencing (UVC) System 5110 and 5115, when the Linux operating system is used, uses world-readable permissions for the /etc/shadow file, which allows local users to discover encrypted passwords by reading this file, aka Bug ID CSCti54043.
Published: 2010-11-22T19:00:00.000Z
Updated: 2024-09-16T16:18:25.395Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4302 vulnerable 2026-06-08 04:55:19.748967 Details available
/opt/rv/Versions/CurrentVersion/Mcu/Config/Mcu.val in Cisco Unified Videoconferencing (UVC) System 5110 and 5115, when the Linux operating system is used, uses a weak hashing algorithm for the (1) administrator and (2) operator passwords, which makes it easier for local users to obtain sensitive information by recovering the cleartext values, aka Bug ID CSCti54010.
Published: 2010-11-22T19:00:00.000Z
Updated: 2024-09-16T19:31:27.822Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3038 vulnerable 2026-06-08 04:55:12.330890 Details available
Cisco Unified Videoconferencing (UVC) System 5110 and 5115, when the Linux operating system is used, has a default password for the (1) root, (2) cs, and (3) develop accounts, which makes it easier for remote attackers to obtain access via the (a) FTP or (b) SSH daemon, aka Bug ID CSCti54008.
Published: 2010-11-22T19:00:00.000Z
Updated: 2024-08-07T02:55:46.701Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3037 vulnerable 2026-06-08 04:55:12.323667 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.