Cisco Releases Security Advisory

Cisco has released a security advisory to address a vulnerability in the Cisco TelePresence System. This vulnerability may allow a remote attacker to access the web server via a user account created with default credentials, which gives the attacker full administrative rights to the system.

US-CERT encourages users and administrators to review the following Cisco Security Advisory and US-CERT Alert TA13-175A and apply any necessary updates or workarounds to help mitigate these vulnerabilities.

• Cisco TelePresence System Default Credentials Vulnerability
• TA13-175A Risks of Default Passwords on the Internet