CVE:CVE-2010-3037
CNNVD:CNNVD-201011-208
Cisco Unified Videoconferencing 是思科统一通信系统的一个组成部分，适用于需要一个可靠、便于管理、经济有效的网络基础设施，来进行视频会议应用部署的机构和电信运营商。
Cisco Unified Videoconferencing (UVC) System 5110和5115,也可能在Unified Videoconferencing System 3545和5230，Unified Videoconferencing 3527 Primary Rate Interface(PRI)Gateway，Unified Videoconferencing 3522 Basic Rate Interfaces (BRI) Gateway，以及Unified Videoconferencing 3515 Multipoint Control Unit(MCU)的goform/websXMLAdminRequestCgi.cgi文件中存在代码注入漏洞。远程认证管理员可以借助用户名字段执行任意命令。该漏洞与"shell命令注入漏洞"有关。
solution:Upgrade cisco unified_videoconferencing_system_5110_firmware to a higher version than 7.0.1.13.3,and avoid the version 7.0.1.13.3; Upgrade cisco unified_videoconferencing_system_5115_firmware to a higher version than 7.0.1.13.3,and avoid the version 7.0.1.13.3; Upgrade cisco unified_videoconferencing_system_5110 to a higher version than *; Upgrade cisco unified_videoconferencing_system_5115 to a higher version than *; Upgrade cisco unified_videoconferencing_system_3515_multipoint_control_unit_firmware to a higher version than 7.0.1.13.3,and avoid the version 7.0.1.13.3; Upgrade cisco unified_videoconferencing_system_3522_basic_rate_interface_gateway_firmware to a higher version than 7.0.1.13.3,and avoid the version 7.0.1.13.3; Upgrade cisco unified_videoconferencing_system_3527_primary_rate_interface_gateway_firmware to a higher version than 7.0.1.13.3,and avoid the version 7.0.1.13.3; Upgrade cisco unified_videoconferencing_system_3545_firmware to a higher version than 7.0.1.13.3,and avoid the version 7.0.1.13.3; Upgrade cisco unified_videoconferencing_system_5230_firmware to a higher version than 7.0.1.13.3,and avoid the version 7.0.1.13.3; Upgrade cisco unified_videoconferencing_system_3515_multipoint_control_unit to a higher version than *; Upgrade cisco unified_videoconferencing_system_3522_basic_rate_interface_gateway to a higher version than *; Upgrade cisco unified_videoconferencing_system_3527_primary_rate_interface_gateway to a higher version than *; Upgrade cisco unified_videoconferencing_system_3545 to a higher version than *; Upgrade cisco unified_videoconferencing_system_5230 to a higher version than *