CVE-2013-3405 Information

Description

The web portal in TC software on Cisco TelePresence endpoints does not require an exact password match during a login attempt by a user who has not configured a password which allows remote attackers to bypass authentication by sending an arbitrary password aka Bug ID CSCud96071.

Reference

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3405