CVE-2011-0376: The TFTP implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x, 1.6.0, an...

Security readout for executives and security teams

CVE-2011-0376 is an information disclosure issue in Cisco TelePresence endpoint devices. A remote attacker could use a TFTP GET request to obtain sensitive information from affected software versions. The provided sources do not include CVSS scoring, exploit confirmation, or detailed fix text. Exposure is most likely where affected Cisco TelePresence endpoints are still deployed and reachable over TFTP. The public bundle does not identify specific models, network prerequisites, authentication requirements, or affected file types. Treat this as a legacy exposure cleanup item unless affected devices are externally reachable or still used in sensitive meeting environments. The business concern is unauthorized access to endpoint-stored information, not confirmed active exploitation. Mitigation focus: Identify Cisco TelePresence endpoints and their installed software versions.; Prioritize versions 1.2.x through 1.5.x, 1.6.0, and 1.6.1 for review.; Check Cisco advisory guidance for fixed releases or supported remediation..

Prepared

Jun 24, 2026, 13:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.