CVE:CVE-2011-0376
CNNVD:CNNVD-201102-345
Cisco TelePresence是美国思科（Cisco）公司的一套被称为“网真”系统的视频会议解决方案。该方案提供音频、视频空间等组件，可为远程参会者提供一个“面对面”的虚拟会议室效果。Cisco TelePresence Endpoint是其中的终端服务。
带有软件1.2.x至1.5.x版本，1.6.0及1.6.1版本的Cisco TelePresence终端设备的TFTP实现中存在信息泄露漏洞。远程攻击者可以借助GET请求获取敏感信息。
solution:Upgrade cisco telepresence_system_software to a higher version than 1.2.3,1.3.2,1.4.7,1.5.1,1.5.3,1.5.10,1.5.11,1.5.12,1.5.13,1.6.0,1.6.1,and avoid the version 1.2.3,1.3.2,1.4.7,1.5.1,1.5.3,1.5.10,1.5.11,1.5.12,1.5.13,1.6.0,1.6.1; Upgrade cisco telepresence_system_1000 to a higher version than *; Upgrade cisco telepresence_system_1100 to a higher version than *; Upgrade cisco telepresence_system_3000 to a higher version than *; Upgrade cisco telepresence_system_1300_series to a higher version than *; Upgrade cisco telepresence_system_3200_series to a higher version than *; Upgrade cisco telepresence_system_500_series to a higher version than *