CVE:CVE-2010-4302
CNNVD:CNNVD-201011-238
Cisco Unified Videoconferencing 是思科统一通信系统的一个组成部分，适用于需要一个可靠、便于管理、经济有效的网络基础设施，来进行视频会议应用部署的机构和电信运营商。
Cisco Unified Videoconferencing(UVC)System 5110和5115中的/opt/rv/Versions/CurrentVersion/Mcu/Config/Mcu.val文件在使用Linux操作系统时，对(1)管理员和(2)操作者的密码使用了弱哈希算法。本地用户更容易通过修复明文值的方式获得敏感信息。
solution:Upgrade cisco unified_videoconferencing_system_5110_firmware to a higher version than 7.0.1.13.3,and avoid the version 7.0.1.13.3; Upgrade cisco unified_videoconferencing_system_5115_firmware to a higher version than 7.0.1.13.3,and avoid the version 7.0.1.13.3; Upgrade cisco unified_videoconferencing_system_5110 to a higher version than *; Upgrade cisco unified_videoconferencing_system_5115 to a higher version than *