CVE:CVE-2013-3454
CNNVD:CNNVD-201308-126
Cisco TelePresence是美国思科（Cisco）公司的一套被称为“网真”系统的视频会议解决方案。该方案提供音频、视频空间等组件，可为远程参会者提供一个“面对面”的虚拟会议室效果。
Cisco TelePresence System Software中存在安全漏洞，该漏洞源于程序对pwrecovery账户设置为默认密码。远程攻击者可通过HTTPS请求利用该漏洞修改配置或执行任意操作。以下产品及版本受到影响：500，13X0，1X00，30X0及3X00设备上的Cisco TelePresence System Software 1.10.1及之前的版本和TX 9X00设备上的Cisco TelePresence System Software 6.0.3及之前的版本。
solution:Upgrade cisco telepresence_system_tx9000 to a higher version than *; Upgrade cisco telepresence_system_tx9200 to a higher version than *; Upgrade cisco telepresence_system_software to a higher version than 1.9.0(46,1.9.0.1(3,1.9.1(68,1.9.2,1.9.3,1.9.4,1.9.5,1.9.6,6.0.0.1(4,6.0.1(50,6.0.2(28,1.10.1,1.2.3,1.2.3(1101,1.3.2,1.3.2(1393,1.4.7,1.4.7(2229,1.5.1,1.5.1(2082,1.5.3,1.5.3(2115,1.5.10,1.5.10(3648,1.5.11,1.5.11(3659,1.5.12,1.5.12(3701,1.5.13,1.5.13(3717,1.6.0,1.6.0(3954,1.6.1,1.6.2,1.6.2(4023,1.6.3,1.6.3(4042,1.6.4,1.6.4(4072,1.6.5,1.6.5(4097,1.6.6,1.6.6(4109,1.6.7,1.6.7(4212,1.6.8,1.6.8(4222,1.7.0.1(4764,1.7.0.2(4719,1.7.1(4864,1.7.2(4937,1.7.2.1(2,1.7.4(270,1.7.5(42,1.7.6(4,1.8.0(55,1.8.1(34,1.8.2(11,1.8.3(4,1.10.0,and avoid the version 1.9.0(46),1.9.0.1(3),1.9.1(68),1.9.2,1.9.3,1.9.4,1.9.5,1.9.6,6.0.0.1(4),6.0.1(50),6.0.2(28),(,1.10.1],1.2.3,1.2.3(1101),1.3.2,1.3.2(1393),1.4.7,1.4.7(2229),1.5.1,1.5.1(2082),1.5.3,1.5.3(2115),1.5.10,1.5.10(3648),1.5.11,1.5.11(3659),1.5.12,1.5.12(3701),1.5.13,1.5.13(3717),1.6.0,1.6.0(3954),1.6.1,1.6.2,1.6.2(4023),1.6.3,1.6.3(4042),1.6.4,1.6.4(4072),1.6.5,1.6.5(4097),1.6.6,1.6.6(4109),1.6.7,1.6.7(4212),1.6.8,1.6.8(4222),1.7.0.1(4764),1.7.0.2(4719),1.7.1(4864),1.7.2(4937),1.7.2.1(2),1.7.4(270),1.7.5(42),1.7.6(4),1.8.0(55),1.8.1(34),1.8.2(11),1.8.3(4),1.10.0; Upgrade cisco telepresence_system_1300 to a higher version than -; Upgrade cisco telepresence_system_1300-65 to a higher version than -; Upgrade cisco telepresence_system_3000 to a higher version than *; Upgrade cisco telepresence_system_3010 to a higher version than *; Upgrade cisco telepresence_system_3200 to a higher version than *; Upgrade cisco telepresence_system_3210 to a higher version than *; Upgrade cisco telepresence_system_500-32 to a higher version than -; Upgrade cisco telepresence_system_500-37 to a higher version than -