CVE:CVE-2011-2763
CNNVD:CNNVD-201109-002
LifeSize Room应用程序LS_RM1_3.5.3 (11)和4.7.18版本的web界面中存在输入验证漏洞。远程攻击者可借助修改对gateway.php中LSRoom_Remoting.doCommand函数的请求执行任意命令。
solution:Upgrade lifesize lifesize_room_appliance_software to a higher version than 4.7.18,ls_rm1_3.5.3,and avoid the version 4.7.18,ls_rm1_3.5.3