[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2011-2538":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":25,"cwes":26,"cpes":28,"technologies":30,"references":32,"score":34,"epss_score":35,"epss_percentile":36,"is_kev":37,"cisa_kev_date_added":38,"cisa_kev_due_date":38,"cisa_ssvc":39,"attack_mappings":49,"exploits":86},156520,"CVE-2011-2538","EUVD-2011-2521","Cisco Video Communications Server (VCS) before X7.0.3 contains a command injection vulnerability which allows remote, authenticated attackers to execute arbitrary commands.","2019-10-29T19:15:00Z",{"cvss_v2.0":10,"cvss_v3.1":18},{"version":11,"baseScore":12,"accessVector":13,"vectorString":14,"authentication":15,"integrityImpact":16,"accessComplexity":17,"availabilityImpact":16,"confidentialityImpact":16},"2.0",9,"NETWORK","AV:N\u002FAC:L\u002FAu:S\u002FC:C\u002FI:C\u002FA:C","SINGLE","COMPLETE","LOW",{"scope":19,"version":20,"baseScore":21,"attackVector":13,"baseSeverity":22,"vectorString":23,"integrityImpact":22,"userInteraction":24,"attackComplexity":17,"availabilityImpact":22,"privilegesRequired":22,"confidentialityImpact":22},"UNCHANGED","3.1",7.2,"HIGH","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","NONE",true,[27],"CWE-74",[29],"cpe:2.3:a:cisco:telepresence_video_communication_server:*:*:*:*:*:*:*:*",[31],"Cisco Telepresence Video Communication Server",[33],"https:\u002F\u002Fwww.cisco.com\u002Fc\u002Fdam\u002Fen\u002Fus\u002Ftd\u002Fdocs\u002Ftelepresence\u002Finfrastructure\u002Fvcs\u002Frelease_note\u002FCisco_VCS_Release_Note_X7-0-3.pdf",0.56,0.02567,0.85041,false,null,{"timestamp":40,"automatable":41,"tech_impact":42,"exploitation":43,"cisa_decision":44,"cisa_remediation_timeline":48},"2024-11-20T16:50:42.581742Z","no","total","none",{"vector":45,"decision":46,"priority":47},"CISAv1\u002FE:N\u002FA:N\u002FT:T\u002FM:H\u002F2026-10-25T07:15:47.669864\u002F","track_star","medium","14D",[50,56,65,73,79],{"name":51,"source":52,"tactics":53,"technique_id":55},"Exploit Public-Facing Application","attack_vector",[54],"initial-access","T1190",{"name":57,"source":58,"cwe_ids":59,"tactics":60,"capec_ids":62,"technique_id":64},"Obfuscated Files or Information","capec",[27],[61],"stealth",[63],"CAPEC-267","T1027",{"name":66,"source":58,"cwe_ids":67,"tactics":68,"capec_ids":70,"technique_id":72},"Dynamic Linker Hijacking",[27],[69,61],"execution",[71],"CAPEC-13","T1574.006",{"name":74,"source":58,"cwe_ids":75,"tactics":76,"capec_ids":77,"technique_id":78},"Path Interception by PATH Environment Variable",[27],[69,61],[71],"T1574.007",{"name":80,"source":58,"cwe_ids":81,"tactics":82,"capec_ids":84,"technique_id":85},"Prevent Command History Logging",[27],[83],"defense-impairment",[71],"T1690",[]]