High severity7.2NVD Advisory· Published Oct 29, 2019· Updated Jun 16, 2026

CVE-2011-2538

Description

Cisco Video Communications Server (VCS) before X7.0.3 contains a command injection vulnerability which allows remote, authenticated attackers to execute arbitrary commands.

Affected products

Cisco Systems, Inc./Telepresence Video Communication Server
cpe:2.3:a:cisco:telepresence_video_communication_server:*:*:*:*:*:*:*:*
Range: <x7.0.3
Cisco Systems, Inc./Video Communications Serverllm-create
Range: <X7.0.3
Cisco/Cisco Video Communications Server (VCS)v5
Range: X7.0.3

Patches

Vulnerability mechanics

References

www.cisco.com/c/dam/en/us/td/docs/telepresence/infrastructure/vcs/release_note/Cisco_VCS_Release_Note_X7-0-3.pdfnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.468
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000