The XML-RPC implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote attackers to execute arbitrary commands via a TCP request related to a \command injection vulnerability \ aka Bug ID CSCtb52587.