The web portal in TC software on Cisco TelePresence endpoints does not require an exact password match during a login attempt by a user who has not configured a password, which allows remote attackers to bypass authentication by sending an arbitrary password, aka Bug ID CSCud96071.
| Product | Vulnerable range | Fixed version | Advisory |
|---|---|---|---|
| n/a n/a | — | not specified | advisory ↗ |