Cisco TelePresence VX Clinical Assistant Administrative Password Reset Vulnerability

by George Chetcuti [Published on 11 Nov. 2013 / Last Updated on 11 Nov. 2013]

Cisco has released free software updates that address this vulnerability

A vulnerability in the WIL-A module of Cisco TelePresence VX Clinical Assistant could allow an unauthenticated, remote attacker to log in as the admin user of the device using a blank password. The vulnerability is due to a coding error that resets the password for the admin user to a blank password on every reboot. An attacker could exploit this vulnerability by logging in to the administrative interface as the admin user with a blank password.

Read more here - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131106-tvxca

Add Review or Comment

See Also

Featured Links